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Nuclear Energy for the 
New Millennium 


Nuclear energy plays a major role in meet- 
ing the world’s energy needs. At the end of 2005, 
there were 443 nuclear power plants operating in 
32 countries. These plants account for 17% of the 
world’s electricity. The industry remains dynamic, 
as evidenced by the fact that several new plants enter 
commercial operation every year and there are, typi- 
cally, 30 or more in various stages of construction 
at any given time. 


Generating electricity with nuclear energy 
permits economic and social development to be 
sustainable; that is, not limited by encroaching envi- 
ronmental concerns. A non-nuclear, baseload power 
plant generates electricity by burning fossil fuels 
day in and day out and releasing the by-products to 
the environment. A nuclear plant, on the other hand, 
generates large amounts of electricity with virtually 
no impact on the environment. In quantitative terms, 
if the world’s nuclear plants were replaced with coal- 
fired plants, global CO, emissions would increase by 
8% every year. This would amount to 1600 million 
tons per year at a time when the world is trying to 
reduce emissions by 4200 million tons per year. 
Similarly, if the world’s growing appetite for new 
electricity is met without nuclear energy playing a 
key role, CO, emissions would quickly rise to levels 
that curtail economic growth. 


The Advanced Boiling Water Reactor (ABWR) 
advanced nuclear plant will play an important role 
in meeting the conflicting needs of developed and 
developing economies for massive amounts of new 
electricity and the need worldwide to limit CO, 
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emissions. Four ABWRs have been constructed in 
Japan and are reliably generating large amounts of 
low cost electricity. Taiwan is constructing two more 
ABWRs which will enter commercial operation in 
2009 and 2010. Other countries have similar strate- 
gies to deploy advanced nuclear plants, and the suc- 
cessful deployment of ABWRs in Japan and Taiwan, 
coupled with international agreements to limit CO, 
emissions, will only reinforce these plans. 


The ABWR represents an entirely new approach 
to the way nuclear plant projects are undertaken. The 
ABWR was licensed and designed in detail before 
construction ever began. Once construction did be- 
gin, it proceeded smoothly from start to finish in just 
four years. Capital costs amounted to $1600/kW at 
which level nuclear is very competitive with other 
forms of power generation. 


The successful design, licensing, construction 
and operation of the ABWR nuclear power plant 
ushers in a new era of safe, economic and environ- 
mentally friendly nuclear electricity. The ABWR 
is the first of a new generation of nuclear plants 
equipped with advanced technologies and features 
that raise plant safety to new levels that significantly 
improve the economic competitiveness of this form 
of generation. 


Forty Years in the Making 


The Boiling Water Reactor (BWR) nuclear 
plant, like the Pressurized Water Reactor (PWR), has 
its origins in the technology developed in the 1950’s 
for the U.S. Navy’s nuclear submarine program. The 
first BWR nuclear plant to be built was the 5 MWe 
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Vallecitos plant (1957) located near San Jose, Cali- 
fornia. The Vallecitos plant confirmed the ability of 
the BWR concept to successfully and safely produce 
electricity for a grid. The first large-scale BWR, 
Dresden 1 (1960), then followed. The BWR design 
has subsequently undergone a series of evolutionary 
changes with one purpose in mind—simplify. 


The BWR design has been simplified in two 
key areas—the reactor systems and the contain- 
ment design. Table 1-1 chronicles the development 
of the BWR. 


Dresden 1 was, interestingly enough, not a true 
BWR. The design was based upon dual steam cycle, 
not the direct steam cycle that characterizes BWRs. 
Steam was generated in the reactor but then flowed 


Product First Commercial 
Line Operation Date 


to an elevated steam drum and a secondary steam 
generator before making its way to the turbine. 
The first step down the path of simplicity that led 
ultimately to the ABWR was the elimination of the 
external steam drum by introducing two technical 
innovations—the internal steam separator and dryer 
(KRB, 1962). This practice of simplifying the design 
with technical innovations was to be repeated over 
and over. 


The first large direct cycle BWRs (Oyster Creek) 
appeared in the mid-1960’s and were characterized 
by the elimination of the steam generators and the 
use of five external recirculation loops. Later, reactor 
systems were further simplified by the introduction 
of internal jet pumps. These pumps sufficiently 
boosted recirculation flow so that only two external 


Representative Plant/ 
Characteristics 


BWR/11 1960 


Dresden 1 


Initial commercial-size BWR 


BWR/2 1969 


Oyster Creek 


Plants purchased solely on economics 
Large direct cycle 


Dresden 2 


First jet pump application 
Improved ECCS: spray and flood capability 


Vermont Yankee 


Increased power density (20%) 


Improved ECCS 


Valve flow control 


Cofrentes 


Compact control room 
Solid-state nuclear system protection system 


Kashiwazaki-Kariwa 6 


Reactor internal pumps 

Fine-motion control rod drives 

Advanced control room, digital solid-state 
microprocessors 

Fiber optic data transmission / multiplexing 

Increased number of fuel bundles 

Titanium condenser 

Improved ECCS: high/low pressure flooders 


Table 1-1. Evolution of the GE BWR 


recirculation loops were needed. This change first 
appeared in the Dresden-2 BWR/3 plant. 


The use of reactor internal pumps in the ABWR 
design has taken this process of simplification to 
its logical conclusion. By using pumps attached 
directly to the vessel itself, the jet pumps and the 
external recirculation systems, with all their pumps, 
valves, piping, and snubbers, have been eliminated 
altogether. This design feature is the source of many 
of the ABWR’s safety and operational advantages. 
Figure 1-1 illustrates the evolution of the reactor 
system design. 


ABWR 


Dresden 2 


Figure 1-1 Evolution of the Reactor System Design 


The first BWR containments were spherical 
“dry” structures, similar to those still used today in 
PWR designs. The BWR, however, quickly moved 
to the “pressure suppression” containment design for 
its many advantages. Among these are: 


e High heat capacity 
e Lower design pressure 


e Superior ability to accommodate rapid depres- 
surization 


e Unique ability to filter and retain fission prod- 
ucts 


e Provision of a large source of readily available 
makeup water in the case of accidents 


e Simplified, compact design 


It is the reduction in containment design pres- 
sures, together with the elimination of the external 
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recirculation loops, that allows the containment 
(and, by extension, the reactor building) to be more 
compact. 


The Mark I containment was the first of the new 
containment designs. The torus used to house a large 
water inventory in the Mark I gives this design its 
characteristic light bulb configuration. The conical 
Mark II design has a less-complicated arrangement, 
based on steel-lined reinforced concrete. A key fea- 
ture is the large containment drywell that provides 
more room for the steam and ECCS piping. The 
Mark III containment design, used worldwide with 
BWR/6s and some BWR/5s, represented a major 
improvement in simplicity. Its steel containment 
structure is a right circular cylinder that is easy to 
construct, and provides ready access to equipment 
and ample space for maintenance activities. Other 
features of the Mark III include horizontal vents to 
reduce overall loss-of-coolant accident (LOCA) 
dynamic loads and a free-standing all-steel structure 
to ensure leak-tightness. 


The ABWR containment is significantly smaller 
than the Mark III containment because the elimina- 
tion of the recirculation loops translates into a sig- 
nificantly more compact containment and reactor 
building. The structure itself is made of reinforced 
concrete with a steel liner from which it derives its 
name—RCCYV, or reinforced concrete containment 
vessel. Figure 1-2 illustrates the evolution of the 
BWR containment from the earliest versions to 
today’s ABWR RCCV design.Where the reactor 
building is also shown, the containment is outlined 


DRY 


MARK III 


Figure 1-2. Evolution of BWR Containment 
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in red. 


There are 93 BWRs, including four ABWRs, 
currently operating worldwide. Many are among 
the best operating plants in the world, performing 
in the “best of class” category. Numerous countries 
rely heavily upon BWR plants to meet their needs 
for electricity. Japan, for example, has 32 BWR 
plants, representing nearly two-thirds of its installed 
nuclear capacity. The Tokyo Electric Power Com- 
pany (TEPCO) owns 17 nuclear plants, all of which 
are BWRs. TEPCO’s Kashiwazaki-Kariwa nuclear 
station, which consists of seven (7) large BWRs, is 
the largest power generation facility in the world, 
licensed for 8,200 MWe. Similarly, BWR plants pre- 
dominate in Taiwan and several European countries. 
In the United States, there are 37 operating BWRs. 


To date, the ABWR plant is the only advanced 
nuclear plant in operation or under construction. 


ABWR Development 
and Design Objectives 


Development of the ABWR took place dur- 
ing the 1980’s under the sponsorship of the Tokyo 
Electric Power Company (TEPCO). The stated 
purpose of the development effort was to design a 
BWR plant that included a careful blend of (1) the 
best features of worldwide operating BWRs, (2) 
available new technologies, and (3) new modular 
construction techniques. Safety improvements 
were, as always, the top priority. Anticipating the 
economic challenges that lay ahead, special atten- 
tion was paid to systematically reducing the capital 
cost and incorporating features into the plant design 
that would make maintenance significantly easier 
and more efficient. 


Development of the ABWR occurred in a series 
of steps. Phase 1 was a conceptual design study that 
determined the feasibility of the ABWR concept. 
Phase 2, in which most of the development work 
took place, included more detailed engineering and 
the testing of new technologies and design features. 
The purpose of Phase 3 was to put the finishing 


touches on the design and systematically reduce 
capital costs, which proved to be a highly successful 
and, in hindsight, fortuitous endeavor. The develop- 
ment phases came to an end in 1988 when TEPCO 
announced that the next Kashiwazaki-Kariwa units 
to be constructed would be ABWRs. 


With the selection of the ABWR for the K-6&7 
project, the detailed, or project, engineering began. 
Licensing activities with the Japanese regulatory 
agency, MITI (Ministry of International Trade and 
Industry), also started at this time and, interestingly, 
were conducted in parallel for some time with the 
review of the ABWR in the U.S. by the Nuclear 
Regulatory Commission (NRC). MITI and the 
NRC, in fact, held several meetings to discuss their 
respective reviews. 


By 1991, the detailed design was essentially 
complete and MITI concluded its licensing review. 
An Establishment Permit, or license, was issued 
in May 1991. Excavation began later that year on 
September 17, bringing a decade of development 
work to a successful conclusion. 


Development of an advanced nuclear plant is 
a major endeavor. The development of the ABWR 
spanned a decade and cost an estimated $500M. 
Such an enterprise can only be undertaken in 
cooperation with many other organizations. The 
ABWR was developed by GE in cooperation with 
its technical associates Hitachi Ltd. and Toshiba 
Corp. The sponsorship and guidance of TEPCO 
was instrumental. The ABWR development also 
received financial support from the other Japanese 
utilities that operate BWRs, as well as from sixteen 
US. utilities. 


ABWR Projects World- 
wide 


Operating ABWRs in Japan 

Four ABWR units in Japan are now constructed 
and fully operational. Two of these units are located 
at TEPCO’s Kashiwazaki-Kariwa site 100 miles 
north of Tokyo on the Sea of Japan. The world’s first 


advanced nuclear plant, Unit 6, began commercial 
operation on November 7, 1996. Unit 7, the second 
ABWR, followed shortly thereafter with commercial 
operation commencing on July 2, 1997. 


Both ABWR units were constructed in world 
record times. From first concrete to fuel load, it 
took just 36.5 months to construct Unit 6 and 38.3 
months for Unit 7, the former being 10 months less 
than the best time achieved for any of the previous 
BWRs constructed in Japan. In addition, both units 
were built on budget, which is an impressive record 
of performance, since these were first-of-a-kind 
units. 


Two more ABWRsare now operational in Japan 
- Hamaoka-5, which began commercial operation in 
January, 2005; and Shika-2, which was connected 
to the grid in July, 2005, and achieved commercial 
operation in March, 2006. 


Both TEPCO units have completed many cycles 
of operation. By all measures, these ABWRs have 
lived up to their promise. Other than regulatory 
mandated outages, both plant have operated essen- 
tially at full power for each fuel cycle. The thermal 
efficiency of the plant is 35%, slightly higher than 
previous designs. See Figure 1-3 for a photo of the 
Kashiwazaki Units 6 & 7. 


Figure 1-3. Kashiwazaki Units 6 & 7 


The ABWR in the United States 
The licensing of the ABWR has been described 


Chapter 1 — Introduction 


as the most exhaustive, and perhaps exhausting, 
review ever undertaken by the U.S. Nuclear Regula- 
tory Commission. The efforts of the NRC and GE 
came to fruition on May 2, 1997 when then Chair of 
the NRC, Ms. Shirley Jackson, approved and signed 
the ABWR Design Certification into law. This was 
rightly hailed by the U.S. industry as a significant 
accomplishment, one that has been envisioned for a 
long time—pre-approval of a standard design of an 
advanced nuclear plant. See Figure 1-4 for a repro- 
duction of the ABWR Design Certification. 
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Figure 1-4. ABWR Design Certification 


The successes continued when the ABWR 
First-of-a-Kind Engineering (FOAKE) program was 
completed in September 1996 to the praise and satis- 
faction of the utility sponsors. FOAKE is an equally 
significant accomplishment because it represents a 
major step toward the U.S. industry’s other goal—to 
have a (pre-licensed) design that is 90% engineered 
prior to the start of construction. At the conclusion 
of the FOAKE program, approximately 65% of the 
engineering of the U.S. version of the ABWR was 
complete. The remaining engineering is being done 
as part of the Lungmen project, described below. 


The ABWR in Taiwan 

Two more ABWRsare being constructed for the 
Taiwan Power Company (TPC) at TPC’s Lungmen 
site, located on the Pacific Ocean about 40 miles 
northeast of Taipei. 


Commercial operation of Lungmen Unit 1 is 
expected to begin in July 2009. The schedule for 
Unit 2, including the start of commercial operation, 
is one year later. 
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Nuclear Plant Projects 
in the New Millennium 


The way in which ABWR nuclear plants are 
designed, licensed and constructed is vastly different 
than was the case 10 or 20 years ago. 


Design and Licensing 

The ABWR nuclear plant is licensed and de- 
signed in its entirety prior to the start of construction. 
Today, long before first concrete is poured, all safety 
and engineering issues are identified and resolved. 
This precludes construction delays due to re-engi- 
neering, a problem which plagued so many projects 
in the past and contributed significantly to the high 
(and in some cases mind-numbing) capital costs. 


The ABWR has been designed to higher levels 
of safety, including being designed to prevent and 
mitigate the consequences of a Severe Accident. 
Licensing documents approved by the USNRC 
indicate that even in the event of a severe accident, 
there would be no release of radioactive material to 
the public. 


Today’s nuclear plants are extensively and ex- 
haustively reviewed by multiple regulatory bodies. 
In fact, the ABWR has been reviewed and approved 
in three countries (Japan, U.S. and Taiwan). This 
ensures that the licensing of the ABWR will proceed 
on a smooth and timely basis in other countries that 
choose to deploy an ABWR. 


The ABWR design has been captured elec- 
tronically using the latest state-of-the-art informa- 
tion management technology called POWRTRAK. 
The benefits appear not only in construction, where 
it has been shown over and over with fossil plants 
that use of this engineering tool reduces construc- 
tion time and cost, but also during the operation and 
maintenance of the plant. POWRTRAK is both a 
3D model design tool and an extensive database for 
plant equipment and materials. 


The approach described above is being fully 
utilized for the Lungmen project. The design and 
licensing of these ABWRs are proceeding smoothly 
as expected. 


Construction of Nuclear Plants in the 2000’s 

Nuclear plants today are constructed much dif- 
ferently than in the past. The most notable difference 
is the schedule. The ABWR can be built in only four 
years, from first concrete to the start of commercial 
operation. Design simplifications and the use of new 
construction technologies and techniques make this 
possible. 


Today, the plant owner is spared the concern for 
schedule delays and cost overruns. Suppliers commit 
to a fixed schedule and price, largely because the 
design has been pre-licensed and pre-engineered. 


Of course, there is no substitute for experience. 
The Lungmen ABWRs are being supplied by a team 
of U.S. and Japanese suppliers, led by GE, that were 
also involved in the supply of the Japanese ABWRs. 
This team and the supporting network of equipment 
sub-suppliers is accustomed to working on an inter- 
national stage and can readily transplant its experi- 
ence and know-how to a new host country. This is the 
basis for the “learning curve” effect, which reduces 
capital costs with each new unit. 


ABWR is Accumulating Operating Experience 

The ABWRs in Japan have now accumulated 
many years of operating experience after having 
completed a highly successful construction ef- 
fort. This represents a wealth of information and 
know-how that is of benefit to subsequent ABWR 
projects. 


Business Risks of the ABWR 

It is important to scrutinize a proposed new 
nuclear project in terms of the business risks it 
carries. A plant design and its supplier contribute 
significantly to the owner’s ability to manage those 
risks. The risks that need to be considered are those 
associated with: the market for electricity, the licens- 
ing and construction of the plant itself, the operation 
of the new facility, the technical aspects of the plant 
design and financing the project. 


In light of these many risks, what characteristics 
should a potential owner look for in a design and in 


a supplier? 


e Licensing risk-can the plant be licensed on a 


reasonable and predictable schedule or will this 
become a lengthy effort that seriously effects 
the date of commercial operation? 

e Engineering risk-is the plant fully designed 
before construction starts or will there be new 
surprises that result in costly design changes 
and construction slowdowns when it is de- 
signed during the course of the project? 

e Technology risk-will the plant perform as 
expected or will some unknown technical prob- 
lem keep the plant shutdown and thus unable 
to meet its revenue projections? 

e Cost risk-will the plant cost more than bud- 
geted, threatening its ability to compete in the 
open market? 

e Schedule risk-will the plant start generating 
electricity-and revenue-as planned or will the 
schedule become protracted leading to cost 
increases? 

e Financing risk-will the new plant have predict- 
able revenues and costs or is there uncertainty 
and lack of confidence by lenders and investors 
for the new project? 


So, how does GE’s 
ABWR measure up? 


Licensing Risk 

The ABWR has been designed to the highest 
standards of safety and has already received a De- 
sign Certification. Moreover, the ABWR has been 
licensed in Japan, where two ABWRs have oper- 
ated safely and successfully for nearly ten years, 
and in Taiwan. This suggests to us that the process 
for reviewing a COL based upon an ABWR project 
should reasonably take one year only. 


Engineering Risk 

The ABWR isa fully designed plant complete 
with equipment and manufacturing drawings. Ma- 
terials, quantities and costs are precisely known. 
This means there will be no major surprises during 
construction that would create costly delays and 
re-designs. This is also the basis upon which GE 
is able to offer a firm price for its scope of supply, 
eliminating that element of risk. 
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Technology Risk 

The ABWR is the only advanced nuclear plant 
being offered that has actually been constructed. In 
fact, two ABWR units in Japan have a combined 
ten years of operational experience. Its owner, the 
Tokyo Electric Power Company, has published 
information that shows these plants have met or 
exceeded all of its design and performance goals 
and no technical problems or design flaws have 
surfaced. This is directly attributable to the $500M, 
five year test and development program jointly 
undertaken by TEPCO, the other Japanese utilities 
that own BWRs, GE, Hitachi and Toshiba. The 
TEPCO units are enjoying high availability and 
capacity factors. 


Cost and Schedule Risk 

GE has eliminated this risk for new owners 
by offering the ABWR with both a fixed price 
and construction schedule, the same basis for the 
Japanese and Tatwan ABWR projects. This reflects 
the confidence that comes with the experience 
of having delivered four ABWR units on a strict 
budget and schedule. 


Financing Risk 

Obtaining financing for a new nuclear project 
is sometimes perceived as a significant obstacle to 
new construction. 


This perception is based upon bad experiences 
in the past with the U.S. being a case in point. The 
experience of Wall Street during the late 1970s 
and early 1980s was that it took 15 years and 
several billion dollars to complete a nuclear plant. 
Such perceptions tend to linger even though today 
nuclear plants are routinely built on budget and 
schedule. 


Lenders and investors, however, are practical 
people. They will finance a project, including a 
nuclear project, if they can be assured ofa return on 
their investment. Investors look for a solid project 
pro forma sheet and this means that the potential 
owner must be able to demonstrate persuasively 
that revenues and project costs are predictable. 
A well-managed utility that has over time suc- 
cessfully operated nuclear plants (avoiding safety 
lapses, achieving high capacity factors, controlling 
costs) assures the financial community that targets 
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for revenues and on-going operational costs will be 
achieved. 


Likewise, a well-managed engineering and 
construction team that has experience building ad- 
vanced nuclear plants assures investors that capital 
costs projections will not be exceeded and that the 
plant will be free of technical problems. The GE led 


team brings this kind of experience and management 
to a project. This actually has the effect of further 
reducing the owner’s capital costs for the very 
good reason that strong project fundamentals lead 
to more favorable financing. A reduction of even 
0.25% in the interest rate or a favorable change in 
debt-to-equity requirements can save tens of mil- 
lions of dollars. 


The key design objectives for the ABWR were 
established during the development program. The 
key goals, all of which were achieved, are as fol- 
lows: 

e Design life of 60 years. 

e Plant availability factor of 87% or greater. 

¢ Less than one unplanned scram per year. 

e 18 to 24-month refueling interval. 

e Operating personnel radiation exposure limit 
<1 Sv/year. 


e Reduced calculated core damage frequency 
by at least a factor of 10 over previous BWRs 
(goal <10°°/yr). 


e Radwaste generation <100 m?/yr. 
e 48-month construction schedule. 


e 20% reduction in capital cost ($/kWh) vs. previ- 
ous 1100 MWe class BWRs. 


At the time, 87% availability was a large im- 
provement over the existing BWR fleet average. 
Based on more recent experience, however, it is 
expected that ABWR will achieve availability fac- 
tors in the mid 90% range. 


Summary of the ABWR 
Key Features 


A comparison of key features of the ABWR to 
the previous model, known as BWR/6, is shown in 
Table 2-1. The cutaway rendering of the ABWR 
plant (Figure 2-1) illustrates the general configura- 
tion of the plant for a single unit site in the U.S. 
Shown in the foreground is the Reactor Building, and 


Chapter 2 — Plant Overview 


Chapter 
Plant Overview 


Figure 2-1. Cutaway Rendering of the ABWR 


in the background is the Turbine Building. Between 
them is located the Control Building. 


An artist’s rendering of the major systems and 
how they are inter-connected is shown in Figure 
2-2. This shows the reactor, ECCS, containment, 
turbine equipment and the key auxiliary mechani- 
cal systems. 


Safety Enhancement 

Recognizing the desire for the continuous 
enhancement of safety, one of GE’s goals for the 
ABWR was to reduce calculated core damage fre- 
quency by an order of magnitude relative to currently 
operating plants. The most important design feature 
contributing to this goal is the adoption of reactor in- 
ternal pumps (RIPs), which are shown in Figure 2-3. 
These vessel-mounted pumps eliminate large, recir- 
culation piping on the vessel, particularly involving 
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Feature 


ABWR 


BWRI/6 


Recirculation 


Vessel-mounted reactor internal 
pumps 


Two external loop Recirc system 
with jet pumps inside RPV 


Control Rod Drives 


Fine-motion CRDs 


Locking piston CRDs 


ECCS 


3-division ECCS 


2-division ECCS plus HPCS 


Reactor Vessel 


Extensive use of forged rings 


Welded plate 


Primary Containment 


Advanced - compact, inerted 


Mark III - large, low pressure, 
not inerted 


Secondary Containment 


Reactor Building 


Shield, fuel, auxiliary & DG 
buildings 


Control & Instrumentation 


Digital, multiplexed, fiber optics, 
multiple channel 


Analog, hardwired, single 
channel 


Control Room 


Operator task-based 


System-based 


Severe Accident Mitigation 


Inerting, drywell flooding, 
containment venting 


Not specifically addressed 


Reactor Water Cleanup 


2%, sealless pumps in cold leg 


1%, pumps in hot leg 


Offgas 


Passive offgas with room- 
temperature charcoal 


Active offgas with chilled 
charcoal filters 


Table 2-1. Comparison of Key ABWR Features to a BWR/6 


penetrations below the top of the core elevation, and 
make possible a smaller Emergency Core Cooling 
System (ECCS) network to maintain core coverage 
during postulated loss-of-coolant events. 


The ABWR ECCS network was designed as a 
full three-division* system, with both a high and low 
pressure injection pump and heat removal capability 
in each division. For diversity, one of the systems, 
the Reactor Core Isolation Cooling (RCIC) Sys- 
tem, includes a steam-driven, high pressure pump. 
Transient response was improved by designing 


*The term division means that all systems and support 
systems necessary to complete the safety function 
are contained within the division, and that division 
is physically separated from other divisions to avoid 
any propagating failures, such as threats due to fire or 
flood. 


three available high-pressure injection systems in 
addition to feedwater. The adoption of three on-site 
emergency diesel-generators to support core cooling 
and heat removal, as well as the addition of an on- 
site gas turbine-generator, reduces the potential for 
Station Blackout (SBO). The balanced ECCS system 
has less reliance on the Automatic Depressurization 
System (ADS) function, since a single, motor-driven 
high pressure core flooder (HPCF) can maintain core 
safety for any postulated pipe break. 


Response to Anticipated Transients Without 
Scram (ATWS) is improved by the adoption of 
fine-motion control rod drives (FMCRDs), which 
allow reactor shutdown either by hydraulic or 
electric insertion. In addition, the need for rapid 
operator action to mitigate an ATWS is avoided by 
automation of emergency procedures such as feed- 
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Figure 2-2 ABWR Major Systems 
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Figure 2-3. ABWR Reactor Pressure 
Vessel and Internals 


water runback and Standby Liquid Control System 
(SLCS) injection. 


Calculated core damage frequency is reduced 
by more than a factor of ten relative to the BWR/6 
design. Furthermore, the ABWR also improved 
the capability to mitigate severe accidents, even 
though such events are extremely unlikely. Through 
nitrogen inerting, containment integrity threats from 
hydrogen generation were eliminated. Sufficient 
spreading area in the lower drywell, together with 
a drywell flooding system, assures coolability of 
postulated core debris. Manual connections make 
it possible to use onsite or offsite water systems to 
maintain core cooling. Finally, to reduce potential 
offsite consequences, a passive, hard-piped wetwell 
vent, controlled by rupture disks, is designed to pre- 
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vent catastrophic containment failure and provide 
maximum fission product scrubbing. The result 
of this design effort is that in the event of a severe 
accident, the whole body dose consequence at the 
calculated site boundary is less than 25 Rem. The 
probability of such an occurrence is calculated at the 
very low level of 10°*/year. More information on this 


subject can be found in Chapter 10. 


Improvements to Operation and 
Maintenance 

With the goal of simplifying the utility’s burden 
of operation and maintenance (O&M) tasks, the 
design of every ABWR electrical and mechanical 
system, as well as the layout of equipment in the 
plant, is focused on improved O&M. 


The reactor vessel is made of forged rings rather 
than welded plates. This eliminates 30% of the welds 
from the core beltline region, for which periodic 
in-service inspection is required. Since there are ten 
RIPs on four power buses, the ABWR’s recirculation 
system is quite robust. Pump speed is controlled by 
solid-state adjustable speed drives, eliminating the 
requirement for flow control valves and low-speed 
motor-generator sets. The wet motor design also 
eliminates rotating seals. 


The FMCRDs permit a number of simplifi- 
cations. First, scram discharge piping and scram 
discharge volumes (SDVs) were eliminated, since 
the hydraulic scram water is discharged into the 
reactor vessel. By supporting the drives directly 
from the core plate, shootout steel located below 
the reactor vessel to mitigate the rod ejection ac- 
cident was eliminated. The number of hydraulic 
control units (HCUs) was reduced by connecting 
two drives to each HCU. The number of rods per 
gang was increased up to 26 rods, greatly improv- 
ing reactor startup times. Finally, since there are 
no organic seals, only two or three drives will be 
inspected per outage, rather than the 30 specified in 
most current plants. 


It was possible to significantly downsize ECCS 
equipment as a result of eliminating large vessel 
nozzles below the top of the core. Capacity require- 
ments are sized based on operating requirements— 
transient response and shutdown cooling—rather 
than on the need for large reflood capability. Inside 
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the reactor vessel, core spray spargers were elimi- 
nated, since no postulated LOCA would lead to core 
uncovery. For transient response, the initiation water 
levels for RCIC and HPCF were separated so that 
there is reduced duty on the equipment relative to 
earlier BWRs. There are three complete shutdown 
cooling loops, including dedicated vessel nozzles. 
Complex operating modes of the Residual Heat Re- 
moval (RHR) Systems, such as steam condensing, 
were eliminated. Finally, heat removal, in addition 
to core injection, was automated so that the operator 
no longer needs to choose which mode to perform 
during transients and accidents. 


Lessons learned from operating experience 
were applied to the selection of ABWR materials. 
Stainless steel materials which qualified as resistant 
to intergranular stress corrosion cracking (IGSCC) 
were used. In areas of high neutron flux, materials 
were also specially selected for resistance to irra- 
diation-assisted stress corrosion cracking (IASCC). 
Hydrogen Water Chemistry (HWC) is recommended 
for normal operation to further mitigate any potential 
for stress corrosion cracking. 


The use of material producing radioactive cobalt 
was minimized. The condenser uses titanium tubing 
at sea water sites and stainless steel tubing for cool- 
ing tower sites. The use of stainless steel in applica- 
tions that currently use carbon steel was expanded. 
Depleted Zinc Oxide is recommended to further 
control radiation buildup. These materials choices 
reduce plant-wide radiation levels and radwaste and 
will accommodate more stringent water chemistry 
requirements. 


Also contributing to good reactor water chem- 
istry is the increase of the Reactor Water Cleanup 
System (RWCU) capacity to two percent. A more 
complete summary of materials and water chemistry 
considerations is given in Appendix B. 


The Offgas System was simplified, reflecting 
lessons learned from operating experience. The 
charcoal beds are maintained at ambient temperature 
rather than refrigerated. The desiccant drier was 
eliminated. 

The ABWR Reactor Building (including con- 
tainment) was configured to simplify and reduce 
the O&M burden. Figure 2-4 illustrates some of the 
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key design features of the ABWR containment. The 
containment itself is a reinforced concrete contain- 
ment vessel (RCCV). 


Within the containment itself, no equipment 
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Figure 2-4. ABWR Reactor Building and Containment 


requires servicing during plant operation. The 
containment is significantly smaller than that of the 
preceding BWR/6. However, primarily due to the 
elimination of the external recirculation system, 
there is actually more room to conduct maintenance 
operations. To simplify maintenance and surveil- 
lance during scheduled outages, permanently in- 
stalled monorails and platforms permit 360j access, 
and both the upper and lower drywells have separate 
personnel and equipment hatches. To simplify RIP 
and FMCRD maintenance, a rotating platform is 
permanently installed in the lower drywell, and 
semi-automated equipment was specially designed 
to remove and install that equipment. The wetwell 
area is compact and isolated from the rest of contain- 
ment, thus minimizing the chance for suppression 
pool contamination with foreign material. 


A new Reactor Building design surrounds the 
containment and incorporates the same functions 
as the BWR/6 auxiliary, fuel and diesel-generator 
buildings. Its volume (including containment) is 
about 30% less than that of the BWR/6 and requires 
substantially lower construction quantities. Its layout 


is integrated with the containment, providing 360 
access with servicing areas located as close as practi- 
cal to the equipment requiring regular service. Clean 
and contaminated zones are well defined and kept 
separate by limited controlled access. The fuel pool 
is sized to store at least ten years of spent fuel plus 
a full core. Therefore, the BWR/6-type fuel transfer 
system has been eliminated. 


Controls and instrumentation were enhanced 
through incorporation of digital technologies with 
automated, self-diagnostic features. The use of 
multiplexing and fiber optic cable has eliminated 1.3 
million feet of cabling. Within the safety systems, 
the adoption of a two-out-of-four trip logic and the 
fiber optic data links have significantly reduced the 
number of required nuclear boiler safety system 
related transmitters. In addition, a three-channel 
controller architecture was adopted for the primary 
process control systems to provide system failure 
tolerance and on-line repair capability. 


A number of improvements were made to the 
Neutron Monitoring System (NMS). Fixed wide- 
range neutron detectors have replaced retractable 
source and intermediate range monitors. In addi- 
tion, an automatic, period-based protection system 
replaced the manual range switches used during 
startup. 


The man-machine interface was significantly 
improved and simplified for the ABWR using 
advanced technologies such as large, flat-panel 
displays, touch-screen CRTs and function-oriented 
keyboards. The number of alarm tiles was reduced 
by almost a factor of ten. Many operating processes 
and procedures are automated, with the control room 
operator performing a confirmatory function. Figure 
2-5 illustrates the main control room. 


The plant features discussed above, while 
simplifying the operator’s burden, have an ancil- 
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lary benefit of increased failure tolerance and/or 
reduced error rates. Studies show that less than one 
unplanned scram per year will be experienced with 
the ABWR. Increased system redundancies will 
also permit on-line maintenance. Thus, both forced 
outages and planned maintenance outages will be 
significantly reduced. 


Minimization of Radiation Exposure and Radwaste 

The ABWR combines advanced facility design 
features and administrative procedures designed to 
keep the occupational radiation exposure to person- 
nel as low as reasonably achievable (ALARA). Dur- 
ing the design phase, layout, shielding, ventilation 
and monitoring instrument designs were integrated 
with traffic, security and access control. Operating 
plant results were continuously integrated during 
the design phase. Clean and controlled access areas 
are separated. 


Reduction in the plant personnel radiation ex- 
posure was achieved by (1) minimizing the necessity 
for and amount of personnel time spent in radiation 
areas and (2) minimizing radiation levels in routinely 
occupied plant areas in the vicinity of plant equip- 
ment expected to require personnel attention. 


Changes in the materials have a significant effect 
on the quantity of radwaste generated through radio- 
active corrosion products. In addition, the conden- 
sate treatment system was improved to include both 
pre-filtration and deep bed demineralizers without 
regeneration which reduce liquid and solid radwaste 
input. Radwaste reduction in the ABWR can also be 
facilitated through the use of advanced incineration 
and super-compaction technologies. 


Reduced Capital Cost 

Design simplifications and quantities reductions 
as discussed above, together with an increase in 
plant electrical output, combine to make a significant 
improvement in plant capital cost. 
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Figure 2-5. ABWR (Lungmen) Main Control Room Panels 
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Nuclear Boiler Systems 


Overview 


The Nuclear Boiler Systems (NBS) produce 
steam from the nuclear fission process, and direct 
this steam to the main turbine. The NBS is comprised 
of the reactor vessel, which serves as a housing 
for the nuclear fuel and associated component, the 
recirculation system, the control rod drive system, 
the main steam system and the reactor building 
portion of the feedwater system. Other supporting 
systems are described in Chapter 5, Auxiliary 
Systems. 


Reactor Vessel and 
Internals 


The reactor vessel houses the reactor core that 
is the heat source for steam generation. The vessel 
contains this heat, produces the steam within its 
boundaries, and serves as one of the fission product 
barriers during normal operation. The ABWR 
reactor assembly is shown in Figure 3-1. For this size 
reactor, the diameter of the ABWR RPV is increased 
but the height is decreased compared to earlier 
product lines. The increased diameter has resulted in 
increased wall thickness. The RPV is approximately 
21 m in height and 7.4 m in diameter. 


The most significant differences between 
the ABWR RPV and earlier product lines are as 
follows: 
¢ Inward vessel flange design 
e Steam nozzle with flow restrictor 


e Double feedwater nozzle thermal sleeve 


e Conical vessel support skirt 

e Relatively flat bottom head 

¢ Elimination of nozzles below the core 
e Reactor internal pump penetrations 


e Use of forged shell rings at and below core 
elevation. 


The RPV design is based on proven BWR 
technology. A noteworthy feature is the lack of 
any large nozzles below the elevation of the top of 
the core. This RPV nozzle configuration precludes 
any large pipe ruptures at or below the elevation of 
the core. It is a key factor in the ability of ABWR 
safety systems to keep the core completely and 
continuously flooded for the entire spectrum of 
design basis loss-of-coolant accidents (LOCAs). 


The vessel contains the core support structure 
that extends to the top of the core. The presence of 
a large volume of steam and water results in two 
very important and beneficial characteristics. It 
provides a large reserve of water above the core, 
which translates directly into a much longer period 
of time being available before core uncovery can 
occur as aresult of feed flow interruption ora LOCA. 
Consequently, this gives an extended period of time 
during which automatic systems or plant operators 
can reestablish reactor inventory control using 
any normal, non-safety-related system capable of 
injecting water into the reactor. Timely initiation 
of these systems is designed to preclude initiation 
of the emergency safety equipment. This easily 
controlled response to loss of normal feedwater is a 
significant operational benefit. In addition, the larger 
RPV volume leads to a reduction in the ABWR 
pressurization rate that would occur after a rapid 
isolation of the reactor from the normal heat sink. 
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Vessel flange and closure head 
Vent and head spray assembly 
Steam outlet flow restrictor 

RPV stabilizer 

Feedwater nozzle 

Forged shell rings 

Vessel support skirt 

Vessel bottom head 

RIP penetrations 

Thermal insulation 

Core shroud 

Core plate 

Top guide 

Fuel supports 

Control rod drive housings 

Control rod guide tubes 

In-core housing 

In-core guide tubes and stabilizers 
Feedwater sparger 

High pressure core flooder (HPCF) sparger 
HPCF coupling 

Low pressure flooder (LPFL) 
Shutdown cooling outlet 

Shroud head and steam separator assembly 
Steam dryer assembly 

Reactor internal pumps (RIP) 

RIP motor casing 

Core and RIP differential pressure line 
Fine motion control rod drives 

Fuel assemblies 

Control rods 

Local power range monitor 


The following sections provide further 
descriptions of the unique features of the ABWR 
RPV and internals. 


Vessel Flange and Closure Head (1) ' 

To minimize the number of main closure 
bolts, the ABWR RPV has an inside type flange. 
This is different from the earlier product lines, 
which had outside type vessel flanges. The inside 
type vessel flange allows a hemispherical main 
closure with radius less than the vessel radius. 
Also, this contributes to minimize the weight of 
the main closure. The vessel closure seal consists 


1. Numbers refer to Figure 3-1 


Figure 3-1. ABWR Reactor Assembly 


of two concentric O-rings which perform without 
detectable leakage at all operating conditions, 
including hydrostatic testing. 


Vent and Head Spray Assembly (2) 

The reactor water cleanup return flow to the 
reactor vessel, via feedwater lines, can be diverted 
partly to a spray nozzle in the reactor head in 
preparation for refueling cooldown. The spray 
maintains saturated conditions in the reactor vessel 
head volume by condensing steam being generated 
by the hot reactor vessel walls and internals. The 
head spray subsystem is designed to rapidly cool 
down the reactor vessel head flange region for 
refueling and to allow installation of steamline plugs 


before vessel floodup for refueling. 


The head vent side of the assembly passes 
steam and noncondensable gases from the reactor 
head to the steamlines during startup and operation. 
During shutdown and filling for hydrotesting, steam 
and noncondensable gases may be vented to the 
drywell equipment sump while the connection to 
the steamline is blocked. When draining the vessel 
during shutdown, air enters the vessel through the 
vent. 


Steam Nozzle with Flow Restrictor (3) 

The ABWR RPV has flow restricting venturi 
located in the steam outlet nozzles. Besides 
providing an outlet for steam from the reactor 
pressure vessel, the steam outlet nozzles will provide 
for (1) steamline break detection by measuring steam 
flow to signal a trip for the main steam isolation 
valves, (2) steam flow measurement for input to the 
feedwater control system, and (3) a flow-choking 
device to limit blowdown and associated loads on 
the RPV and internals in the event of a postulated 
main steam line break. Calculations show that the 
pressure drop in the nozzle is within the requirements 
of the steady-state performance specification. 


RPV Stabilizer (4) 

Stabilizers are located around the periphery 
of the RPV toward its upper end. These provide 
reaction points to resist horizontal loads and suppress 
RPV motion due to earthquakes and postulated pipe 
rupture events. 


Feedwater Nozzle Thermal Sleeve (5) 

The feedwater nozzles utilize double thermal 
sleeves welded to the nozzles. The double thermal 
sleeve protects the vessel nozzle inner blend radius 
from the effects of high frequency thermal cycling. 
A schematic of the feedwater nozzle is shown in 
Figure 3-2. 


Use of Forged Shell Rings (6) 

The ABWR RPV utilizes low alloy forged shell 
rings, per ASME SA-508, Class 3, adjacent to and 
below the core belt line region. The flanges and 
large nozzles are also per ASME SA-508, Class 3. 
The shell rings above the core belt line region and 
the main closure are made from low alloy steel plate 
per ASME A-533, Type B, Class 1. The required 
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Figure 3-2. ABWR Reactor Pressure Vessel 
Feedwater Nozzle 


Reference Nil Ductility, RTNDT, of the vessel 
material is -20°C. Figure 3-3 shows one of the RPV 
forged shell rings during fabrication. 


Vessel Support Skirt (7) 

The vessel support skirt has a conical geometry 
and is attached to the lower vessel cylindrical shell 
course. The support skirt attachment (knuckle) is 
an integral part of the vessel shell ring. Locating 
the conical support skirt on the lower shell ring 
provides: 


e Needed space for the reactor internal pump 
(RIP) heat exchangers. 


Figure 3-3. RPV Forged Steel Ring 
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e Access for ISI of the bottom head weld. 


Reactor Vessel Bottom Head (8) 

The bottom head consists of a spherical bottom 
cap, made from a single forging, extending to 
encompass the CRD penetrations and a conical 
transition section to the toroidal knuckle between 
the head and vessel cylinder. With bottom head 
thickness of approximately 250 mm, the bottom 
head meets the ASME allowables for the specified 
design loads. The main advantage of using a single 
forging for the bottom head is that it eliminates all 
RPV welds within the CRD pattern, thus reducing 
future in-service inspection (ISI) requirements. 


Reactor Internal Pump Penetrations and Weld (9) 

The most significant difference between the 
ABWR and earlier BWR product lines is elimination 
of all major pipe connections below the core by 
incorporating internal recirculation pumps in the 
reactor. The RIP motor casings are welded to the 
vessel bottom head by a design as shown in Figure 
3-4. 


Vertical restraints are provided to prevent the 
motor casing or the motor cover from blowing out 
in the unlikely event ofa failure of the weld between 
the RPV and the motor casing or a failure of the 


Figure 3-4. Reactor Internal Pump Motor Casing 
Including Weld to RPV 


motor cover bolts. In addition, if the restraints should 
fail, the pump impeller is designed to backseat on the 
stretch tube that keeps the pump diffuser in place and 
prevent significant leakage through the failed part. 
More information about the RIP can be found under 
Recirculation System later in this chapter. 


Thermal Insulation (10) 

The RPV insulation is reflective metal type, 
constructed entirely of series 300 stainless steel. 
The insulation is made up of a combination of two 
basic shapes: flat panels and cylindrical panels. The 
insulation for the bottom head and lower shell course 
inside the vessel support is a vertical cylindrical 
panel approximately 75 to 100 mm thick. There is 
also a horizontal panel of the same thickness which 
connects across the bottom of the vertical panels. The 
CRD housings, in-core housings and drain nozzles 
penetrate this panel. 


The insulation for the RPV is supported from the 
reactor shield wall surrounding the vessel, and not 
from the vessel shell. Insulation for the upper head 
and flange is supported by a steel frame independent 
of the vessel. 


At operating conditions, the approximate air 
temperatures outside the vessel and insulation are 
57°C above the top head and 38°C everywhere 
else. 


Core Shroud (11) 

The shroud is a stainless steel cylindrical 
assembly that provides a partition to separate the 
upward flow of coolant through the core from the 
downward recirculation flow. The volume enclosed 
by the shroud is characterized by upper and lower 
regions. The upper portion of the shroud surrounds 
the active fuel and forms the longest section of the 
shroud. This section is bounded at the bottom by the 
core plate. The lower shroud, surrounding part of the 
lower plenum, is welded to the RPV shroud support. 
The shroud provides lateral support for the core by 
supporting the core plate and top guide. 


Core Plate (12) 

The core plate consists of a circular plate with 
round openings. The core plate provides lateral 
support and guidance for the control rod guide tubes, 
in-core flux monitor guide tubes, peripheral fuel 


supports, and startup neutron sources. The last two 
items are also supported vertically by the core plate. 
The entire assembly is bolted to a support ledge in 
the shroud. The core plate also forms a partition 
within the shroud, which causes the recirculation 
flow to pass into the orificed fuel support and through 
the fuel assemblies. 


Top Guide (13) 

The top guide consists ofa grid that gives lateral 
support of the top of the fuel assemblies, a cylinder 
supporting core flooder spargers, and a top flange for 
attaching the shroud head. Each opening provides 
lateral support and guidance for four fuel assemblies 
or, in the case of peripheral fuel, one, two or three 
fuel assemblies. Holes are provided in the bottom of 
the support intersections to anchor the in-core flux 
monitors and startup neutron sources. The top guide 
is bolted to the top of the shroud. 


Fuel Supports (14) 

The fuel supports are of two basic types; namely, 
peripheral fuel supports and orificed fuel supports. 
The peripheral fuel supports are located at the 
outer edge of the active core and are not adjacent to 
control rods. Each peripheral fuel support sustains 
one fuel assembly and contains an orifice designed 
to assure proper coolant flow to the peripheral fuel 
assembly. Each orificed fuel support sustains four 
fuel assemblies vertically upward and horizontally 
and is provided with orifices to assure proper coolant 
flow distribution to each fuel bundle. The orificed 
fuel support sits on the top of the control rod guide 
tube, which carries the weight of the fuel rods down 
to the bottom of the RPV. The control rods pass 
through cruciform openings in the center of the 
orificed fuel support. 


Control Rod Drive Housing (15) 

The control rod drive housing provides extension 
of the RPV for installation of the control rod drive, 
and the attachment of the CRD line. It also supports 
the weight ofa control rod, control rod drive, control 
rod guide tube, orificed fuel support and four fuel 
assemblies. 


Control Rod Guide Tubes (16) 

The control rod guide tubes extend from the top 
of the control rod drive housings up through holes 
in the core plate. Each guide tube is designed as the 
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guide for the lower end of a control rod and as the 
support for an orificed fuel support. This locates the 
four fuel assemblies surrounding the control rod 
drive housing, which, in turn, transmits the weight 
of the guide tube, fuel support, and fuel assemblies 
to the reactor vessel bottom head. The control rod 
guide tube also contains holes, near the top of the 
control rod guide tube and below the core plate, for 
coolant flow to the orificed fuel supports. In addition, 
the guide tube provides a connection to the FMCRD 
to restrain a hypothetical ejection of the FMCRD. 


In-core Housing (17) 

The in-core housings provide extensions of 
the RPV at the bottom head for the installation of 
various in-core flux monitoring sensor assemblies 
which are components of the Neutron Monitoring 
System. It also supports the weight of an in-core flux 
monitoring sensor assembly, in-core guide tube and 
part of the in-core guide tube stabilizer assembly. 


In-Core Guide Tubes and Stabilizers (18) 

The in-core guide tubes extend from the top of 
the in-core housing to the top of the core plate. They 
provide the in-core instrumentation with protection 
from flow of water in the bottom head plenum, and 
guidance for insertion and withdrawal from the core. 
The in-core guide tube stabilizers provide lateral 
support and rigidity to the in-core guide tubes. 


Feedwater Spargers (19) 

The feedwater spargers are attached to brackets 
on the vessel wall and deliver makeup water to the 
reactor during plant startup, power generation and 
plant shutdown modes of operation. Nozzles in the 
spargers provide uniform distribution of feedwater 
flow within the downcomer flow passage. 


High Pressure Core Flooder Sparger Assembly (20) 

The high pressure core flooder (HPCF) spargers 
inside the cylinder of a top guide are arranged to 
provide emergency coolant injection over the upper 
end of the core. The spargers have the function ofa 
standby liquid control solution injection. The HPCF 
spargers are connected to the HPCF nozzles by 
means of an HPCF coupling (21). 


Low Pressure Flooder Spargers (22) 
The two flooding spargers that are attached to 
the vessel wall deliver flow at low pressure from 
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the RHR System and distribute it in the upper 
plenum above the shroud head of the reactor. Flow is 
delivered in either of two modes: (1) for the flooding 
of the reactor in the event of an abnormal drop in 
water level, or (2) in the circulation of cooling water 
to remove residual and core decay heat from the 
reactor during shutdown. 


Shutdown Cooling Nozzles (23) 

Suction for the RHR System in shutdown 
cooling mode is provided by three shutdown cooling 
nozzles. 


Shroud Head and Steam Separator Assembly (24) 

The steam separator assembly consists of a 
slightly domed base on top of which is welded 
an array of standpipes with a three-stage steam 
separator located at the top of each standpipe. The 
steam separator assembly rests on the top flange 
of the core shroud and forms the cover of the core 
discharge plenum region. The seal between the 
separator assembly and core shroud flanges is metal- 
to-metal contact and does not require a gasket or other 
replacement sealing devices. The separator assembly 
is bolted to the core shroud flange, by long holddown 
bolts which, for ease of removal, extend above the 
separators. During installation, the separator base 
is aligned on the core shroud flange with guide 
rods and finally positioned with locating pins. The 
objective of the long-bolt design is to provide direct 
access to the bolts during reactor refueling operations 
with minimum-depth underwater tool manipulation 
during the removal and installation of the assemblies. 
It is not necessary to engage threads in mating up 
the shroud head. A tee-bolt engages in the top guide 
and its nut is tightened to only nominal torque. Final 
loading is established through differential expansion 
of the bolt and compression sleeve. The fixed axial 
flow type steam separators have no moving parts 
and are made of stainless steel. In each separator, 
the steam-water mixture rising through the standpipe 
impinges on vanes which give the mixture a spin 
to establish a vortex wherein the centrifugal forces 
separate the water from the steam in each of three 
stages. Steam leaves the separator at the top and 
passes into the wet steam plenum below the dryer 
(Figure 3-5). The separated water exits from the 
lower end of each stage of the separator and enters 
the pool that surrounds the standpipes to join the 
downcomer annulus flow. 
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Figure 3-5. Schematic of Steam Flow 
through Separator 


Steam Dryer Assembly (25) 

The steam dryer assembly consists of multiple 
banks of dryer units mounted on a common structure 
which is removable from the RPV as an integral unit. 
The assembly includes the dryer banks, dryer supply 
and discharge ducting, drain collecting trough, drain 
ducts, and a skirt which forms a water seal extending 
below the separator reference zero elevation. Steam 
from the separators flows upward and outward 
through the drying vanes (Figure 3-6). These vanes 


are attached to a top and bottom supporting member 
forming a rigid, integral unit. Moisture is removed 
and carried by a system of troughs and drains to the 
pool surrounding the separators and then into the 
recirculation downcomer annulus between the core 
shroud and reactor vessel wall. Upward and radial 
movement of the dryer assembly under the action of 
blowdown and seismic loads is limited by support 
brackets on the vessel shell and holddown brackets 
inside the main closure. The assembly is arranged 
for removal from the vessel as an integral unit on a 
routine basis. 


Reactor Internal Pumps (RIP) (26,27) 


Refer to the next section for information on 
Reactor Internal Pumps (RIP). 


Core and RIP Differential Pressure Lines (28) 
These lines comprise the core flow measurement 
subsystem of the Recirculation Flow Control System 
(RFCS) and provide two methods of measuring 
the ABWR core flow rates. The core AP lines and 
internal pump AP lines enter the reactor vessel 
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Figure 3-6. Schematic of Steam Flow Through Dryer 
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separately through reactor bottom head penetrations. 
Four pairs of the core AP lines enter the head in four 
quadrants through four penetrations and terminate 
immediately above and below the core plate to sense 
the pressure in the region outside the bottom of the 
fuel assemblies and below the core plate during 
normal operation. Similarly, four pairs of the internal 
pump AP lines terminate above and below the pump 
deck and are used to sense the pressure across the 
pump during normal pump operation. 


Fine Motion Control Rod Drives (29) 
Refer to the discussion on the Control Rod Drive 
System later in this chapter. 


Fuel Assemblies, Control Rods and Local 
Power Range Monitors (30-32) 

Refer to the Chapter 6 discussion for fuel and 
related hardware. 


Recirculation System 


The function of the Reactor Recirculation 

System (RCIR) is to: 

e Provide forced circulation of reactor coolant 
for energy transfer from fuel to the cooling 
fluid and, as a result, generate a larger amount 
of steam. 


e Control the reactor power by changing the 
recirculation flow; the flow is controlled by the 
use of adjustable speed pumps. 


The RCIR System provides forced circulation 
of reactor water through the core, removing the heat 
produced by the fuel. The reactor water is made 
up of water removed from the two-phase reactor 
coolant (core flow) in the moisture separators and 
steam dryers and the incoming feedwater flow. The 
RCIR System uses an arrangement of ten pumps to 
provide the motive force for core flow. The pumps 
are mounted internally in the reactor vessel and 
are called reactor internal pumps (RIPs). The RIPs 
function collectively to force the reactor coolant 
through the lower plenum of the reactor and upward 
through openings in the fuel support castings, 
through the fuel bundles, steam separators, and 
down the annulus to be mixed with feedwater and 
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recirculated through the core. Figure 3-7 shows the 
RIPs and the pumped flow path. 


Recirculation flow rate is variable over a range 
from natural circulation flow of 20% to above the 
rated flow required to achieve rated core power. In 
fact, the RCIR design can produce rated core flow 
rate at 100% reactor power with nine of its ten pumps 
operating. The flow control range allows automatic 
regulation of reactor power output between ~70 
to 100% without control rod movement. Core 
flow (RCIR pumping capacity) is regulated by the 
Recirculation Flow Control System (RFC). The 
RFC System provides conditioned control and 
logic signals, which regulate the RIP speed, which, 


teste e 


Figure 3-7 Recirculation Flow Schematic 


in turn, regulates the pump flow. Because the core 
flow affects reactor power and fuel thermal margins, 
the RCIR System is also used to mitigate the effects 
of transient, upset and emergency modes of reactor 
operation. 


There are three RCIR subsystems which are used 
in conjunction with the reactor internal pump: 
e Recirculation Motor Cooling Subsystem (RMC 
Subsystem) 


e Recirculation Motor Purge Subsystem (RMP 
Subsystem) 


e Recirculation Motor Inflatable Shaft Seal 
Subsystem (RMISS) 


Recirculation Motor Cooling Subsystem (RMC) 

Each RIP has its own external heat exchanger 
(Figure 3-8). Each RIP motor casing and the RIP heat 
exchanger is connected via stainless steel piping. 
The heat exchanger is a typical shell-tube type with 
U-tubes supported by baffles. The hot water coming 
from the motor enters from the upper end of the heat 
exchanger shell side and leaves from the lower end 
of the shell side and returns back to the motor. The 
connecting piping is welded to the RIP motor casing 
and also to the heat exchanger shell to prevent any 
leakage during the plant operation. 


Recirculation Motor Purge Subsystem (RMP) 

The purge system provides a source of clean 
control rod drive (CRD) water that flows up the 
annulus between the stretch tube and the shaft 
and prevents the intrusion of reactor water with its 
associated contamination into the motor. The purge 
system normally operates continuously even when 
the RIPs are tripped or the reactor is shutdown for 
the refueling and/or maintenance. 


Recirculation Motor Inflatable Shaft Seal 
Subsystem (RMISS) 

During normal operation, the purpose of this 
system is to prevent any leakage of reactor water 
(escaping from the primary seal) during plant 
outages and to assist in maintenance or inspection 
of motors. During the maintenance of the RIPs, a 
portable pump is used to pressurize the seal using 
water from the Makeup Water System (MUW). The 
seal is made of elastomeric material and seals tightly 
between the pump shaft and the pump motor casing. 
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The pump pressurizes the seal and maintains it at 
shutoff head conditions. 


Reactor Internal Pumps 

The vessel-mounted RIPs simplify the RPV 
by eliminating all large nozzles below the core, 
significantly reducing piping in-service inspection 
(ISI) and personnel exposure, and allowing for a 
compact containment design due to elimination 
of the external recirculation system piping. Use 
of the RIP feature allows for the optimization of 
the Emergency Core Cooling System (ECCS) 
and assures no core uncovery for postulated pipe 
breaks. One of the goals for the ABWR is to reduce 
calculated core damage frequency by an order of 
magnitude relative to GE’s previously designed 
BWR operating plants. One of the most important 
design features contributing to this goal was the 
adoption of RIPs in place of externally pumped 
reactor recirculation system/pumps. 


The internal pumps are an improved version of a 


Figure 3-8. RCIR Subsystems 


European designed RIP that is in operation in many 
European nuclear power plants. About 9 million 
pump hours of successful operating experience has 
been accumulated, with some pumps having been 
in service since the mid-1970’s. 


The general design details of the RIP, motor, 
and heat exchanger are as follows: 


Number of Pumps: 10 

Type of Pump: Vertical shaft, 
single stage, 
mixed flow 

Rated Flow: 7700 m°*/hr/pump 

Rated Head: 40m 

Rated Pump Speed: 1500 rpm 

Overall Height 

(Impeller & Motor): 3m 

Overall Weight: 5000 kg 

Motor Type: 3-Phase, Wet 


Induction Motor 
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Rated Output Power: 830 kW 

Rated Voltage: ~ 3300 V 

Heat Exchanger Type: Shell and Tubes 
Hx Cooling Capacity: 1.15 keal/hr 


Reactor Internal Pump Component Description 

There are 10 RIPs arranged circumferentially 
between the shroud and the RPV near the RPV 
bottom head. Figure 3-9 shows a cross section of 
the RIP used in the ABWR and key components are 
described below. 


Diffuser: The RIP has the impeller and diffuser 
inside the RPV. The diffuser is installed in the pump 
deck and sealed by a piston ring arrangement. The 
RIP diffuser is removable. The diffuser is retained 
on the RPV nozzle by the stretch tube. 


DIFFUSER 
WEAR RING 


DIFFUSER 
PISTON RING 


IMPELLER 


STRETCH TUBE 


PURGE WATER 


STRETCH TUBE 
INLET NUT 


SECONDARY 
SEAL 


SECONDARY SEAL 
PRESSURIZATION 
WATER INLET 


COOLING WATER 
OUTLET 


MOTOR CASING t 


UPPER JOURNAL 
BEARING 


PUMP SHAFT > 


MOTOR ROTOR g! Ke STATOR 


COUPLING STUD 


THRUST DISK oH a 
7 LOWER JOURNAL 

AUXILIARY IMPELLLER {J — BEARING 

TERMINAL 

BOX 


RS 


THRUST 
S BEARING 
SS PADS 
A) su i = 
S 7A! L= = =A I 
llr i 
KD 
| EEAQ | NG COOLING 
Li — - WATER 
ARD INLET 


MOTOR COVER 
ABLE 


Cc 
CONNECTOR AUXILIARY COVER SPEED SENSOR 


Figure 3-9 Cross-Section of RIP 


Stretch Tube: The stretch tube is essentially 
a long hollow bolt which passes through the RPV 
nozzle penetration from the diffuser to the top of 
the RIP motor casing where it is held in tension by 
a large nut. The stretch tube is preloaded by use of 
a stud tensioner similar to that used for the main 
closure studs of the RPV. The pump shaft passes 
through the center of the stretch tube and motor 
rotor. The pump shaft key fits in a slot in the motor 
rotor tube. 


Impeller and Pump Shaft: The impeller and 
the pump shaft are connected by the impeller bolt. 
The pump shaft passes through the stretch tube, rotor 
and is connected to the thrust bearing disk at its lower 
end. The motor rotor keyway slot fits with the key on 
the pump shaft and transmits motor torque. 


Radial Bearings: The motor upper radial 
bearing is below the secondary seal. This bearing 
design has been tested and proven to eliminate 
bearing instability due to half speed rotation. 

The lower radial bearing is located below the 
motor rotor and the stator. The lower radial bearing 
is similar to the upper radial bearing. 


Thrust Bearing: The thrust bearing is of an 
offset tilting pad configuration. The rotating portion 
of the thrust bearing is integral with the cooling 
water auxiliary impeller, which circulates water 
through the motor and bearing to provide cooling 
and cleaning via the purge system. 


Anti-Reverse Rotation Device: Below the 
cooling water auxiliary impeller is the Anti-Reverse 
Rotation Device (ARD). This is a cam clutch 
arrangement that prevents the RIP from rotating 
in the reverse direction when one RIP is tripped 
while the others are running (which can result in 
backflow through the tripped RIP). The purpose 
of the ARD is to prevent reverse rotation of the 
pump shaft and minimize the backflow through an 
idle/tripped RIP. 


Motor (Stator and Rotor): The RIP motor is 
a 3-phase, 4-pole wet induction motor. The cooling 
water flows upward through the windings of the 
stator and the rotor. The motor stator is attached to 
the motor cover. 


Terminal Box: The electrical terminal box is 
bolted to the motor cover. The motor winding cable 
penetrations pass through the motor cover coolant 
pressure boundary and are connected to the power 
supply leads at this location. Each motor is driven 
by its own variable frequency power supply known 
as the Adjustable Speed Drive (ASD). 


Speed and Vibration Sensors: There are 2- 
pump speed sensors and 2-motor casing vibration 
sensors on each RIP motor casing. There is an 
additional sensor on each RIP to detect rubbing of 
internal parts of the pump. 


RIP Operation 

Whenever the RIP motor is started, it is 
controlled to reach its minimum speed. Similarly, 
one by one, the other 9 RIPs are started and brought 
to the minimum speed level. From this condition, the 
speed of all 10 RIPs can be increased individually 
when in the individual speed control mode, or as 
a group when in the automatic ganged mode of 
operation, with the ganged mode being the normally 
preferred mode after all 10 RIPs have been started. 
The RFC System controls the speed of the RIPs 
as described earlier in this section. A change in 
RIP speed conditions will vary the core flow in the 
reactor, which, in turn, will change the reactor power 
during normal power range operation. 


The RFC operational modes also include the 
core flow control mode and the automatic load- 
following mode. The core flow mode controls the 
speed of the RIPs selected for gang speed operation 
to maintain the steady-state core flow equal to the 
core flow demand signal. For the automatic load- 
following mode, the RFC System controls the speed 
of those RIPs selected for gang speed operation to 
reduce the load demand error signal (from the turbine 
control system) to zero. 


Individual RIP speed control operation mode 
and the ganged speed mode of operation provide 
significant flexibility during normal plant operation. 
If, for any reason, one RIP develops a problem, then 
either speed can be reduced to eliminate the problem 
or that RIP can be tripped, if necessary, without 
affecting the continued operation of other RIPs. 


During normal plant rated power operation (in 
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either the core flow control mode or the automatic 
load-following mode), if one RIP is lowered in speed 
or tripped, then the speed of the remaining 9 RIPs 
is increased by the control system to maintain the 
demanded core flow; thus, steady-state plant output 
power remains unaffected. 


RIP Power Supply 

The RIP motor is driven by a solid-state 
variable-frequency power supply known as the 
Adjustable Speed Drive (ASD). The ASD is a 
proven product with wide industrial applications as 
well as experience in the European nuclear plants. 
The ABWR application uses ~3000 V for the output 
voltage rating. The ASD power supply provides 
extremely low maintenance, high reliability, and 
provides excellent RIP speed maneuverability. 


Each RIP is driven by its dedicated ASD. Six RIP 
ASDs receive power from constant speed Motor- 
Generator (M-G) sets and the other four directly 
from medium voltage buses. A representative 
simplified power distribution one-line diagram is 
shown in Figure 3-10. Each M-G set provides power 
to 3 associated RIPASDs. The other four RIP ASDs 
are divided into two sets receiving power directly 
from two separate main buses. 


The assignment of the power distribution 
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Figure 3-10. RIP Power Supply Diagram 
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to individual RIP ASDs is chosen to balance the 
azimuthal distribution within the vessel (e.g., when 
a M-G set trips or one medium voltage bus is lost). 
The M-G sets have inertial flywheels to provide 
continued operation of the associated RIPs during 
either the momentary or complete loss of incoming 
power. After complete loss of the main bus power, 
continued operation of these RIPs for at least 3 
seconds is provided via the M-G sets. 


Control Rod Drive System 


The Control Rod Drive (CRD) System controls 
changes in core reactivity during power operation by 
movement and positioning of the neutron absorbing 
control rods within the core in fine increments in 
response to control signals from the Rod Control 
and Information System (RCIS). The CRD System 
provides rapid control rod insertion in response 
to manual or automatic signals from the Reactor 


SCRAM AND 
PURGE 
WATER TO 
REACTOR 


Protection System (RPS). Figure 3-11 shows the 
basic system configuration and scope. 


When scram is initiated by the RPS, the CRD 
System inserts the negative reactivity necessary to 
shut down the reactor. Each control rod is normally 
controlled by an electric motor unit. When a scram 
signal is received, high-pressure water stored in 
nitrogen charged accumulators forces the control 
rods into the core. Thus, the hydraulic scram action 
is backed up by an electrically energized insertion 
of the control rods. 


The CRD System consists of three major 
elements: 


e Electro-hydraulic fine motion control rod drive 
(FMCRD) mechanisms 


e Hydraulic control unit (HCU) assemblies 


e Control Rod Drive Hydraulic System 
(CRDHS) 


The FMCRDs provide electric-motor-driven 
positioning for normal insertion and withdrawal of 
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Figure 3-11. CRD System Schematic 


the control rods and hydraulic-powered rapid control 
rod insertion for abnormal operating conditions. 
Simultaneous with scram, the FMCRDs also provide 
electric-motor driven run-in of control rods as a path 
to rod insertion that is diverse from the hydraulic- 
powered. The hydraulic power required for scram 
is provided by high pressure water stored in the 
individual HCUs. An HCU can scram two FMCRDs. 
It also provides the flow path for purge water to 
the associated drives during normal operation. The 
CRDHS supplies pressurized water for charging 
the HCU scram accumulators and purging to the 
FMCRDs. 


Fine Motion Control Rod Drives 

The ABWR FMCRDs are distinguished from 
the locking piston CRDs, which are in operation in 
all current GE plants, in that the control blades are 
moved electrically during normal operation. This 
feature permits small power changes, improved 
startup time, and improved power maneuvering. 
The FMCRD, as with current drives, is inserted into 
the core hydraulically during emergency shutdown. 
Because the FMCRD has the additional electrical 
motor, it drives the control blade into the core even 
if the primary hydraulic system fails to do so, thus 
providing an additional level of protection against 
ATWS events. The FMCRD design is an improved 
version of similar drives that have been in operation 
in European BWRs since 1972. 


Figure 3-12 shows a cross-section of the 
FMCRD as used in the ABWR. The FMCRD 
consists of four major subassemblies: the drive, the 
spool piece, the brake and the motor/synchros. The 
spool piece and motor may be removed without 
disturbing the drive and this allows maintenance 
with low personnel exposure. 


The drive consists of the outer tube, hollow 
piston, guide tube, buffer, labyrinth seal, ball check 
valve, spindle adaptor and splined spindle adaptor 
back seat. 


The coupling is a bayonet configuration which, 
when coupled with the mating coupling on the 
control rod blade, precludes separation of the blade 
and the hollow piston. 


The hollow piston is a long hollow tube with a 
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Figure 3-12. Fine Motion Control Rod Drive 
Cross-Section 


piston head at the lower end. The hollow piston is 
driven into the reactor during scram by the pressure 
differential that is produced by the high scram 
flow. The labyrinth seal, which is contained inside 
the buffer, at the top end of the outer tube restricts 
the flow from the drive to the reactor, thereby 
maximizing the pressure drop which enhances 
scram performance. Additionally, it allows the purge 
flow during normal operation to preclude entrance 
of reactor water and associated crud into the drive. 
The piston head contains latches that latch into 
notches in the drive guide tube after scram. The 
scram buffering action is provided by an assembly of 
Belleville washers in the buffer and is supplemented 
by hydraulic damping as the buffer assembly parts 
come together. 
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The outer tube performs several functions, 
one of which is to absorb the scram pressure, 
preventing its application to the CRD housing 
which is part of the RCPB. The outer tube top end 
is a bayonet connection similar to that employed 
on the hollow piston which couples with a similar 
bayonet connection on the control rod guide tube, 
sandwiching the CRD housing end cap between 
the two. The outer tube lower end is a flange which 
bolts to the CRD housing flange. The bolts allow 
the drive to remain in place when the motor and 
spool piece are removed. The combination of the 
positive coupling of the control rod guide tube and 
the drive and the flange on the lower end of the outer 
tube form a positive means of preventing ejection of 
the FMCRD/control rod for any postulated housing 
break. Protection against the postulated failure of the 
housing to stub tube weld is provided by the same 
features with the shootout load being transferred 
to the core plate by the flange at the top end of the 
control rod guide tube. These internal CRD blowout 
support features allow the elimination of the external 
support structure of beams, hanger rods, grids and 
support bars used to prevent rod ejection as in 
previous GE BWR product lines. 


The latches are designed so that with only one 
being engaged it is sufficient to hold the control rod 
in place under all loading, including the ejection load 
caused by a scram line break. 


In normal operation, the hollow piston rests on 
the ball nut and is raised and lowered by translation 
of the ball nut along the ball screw resulting from 
rotation of the ball spindle. The latches are held in 
a retracted position by the ball nut. During scram, 
the hollow piston is lifted off the ball nut by the 
hydraulic pressure. 


The spindle adaptor and splined spindle 
adaptor back seat provide a back seat type anti- 
withdrawal latch feature, which consists of a gear 
that automatically engages whenever the spool 
piece is lowered. This prevents the ball spindle from 
rotating and withdrawing the rod. 


The spool piece contains a redundant packing 
type shaft seal to preclude leakage from the drive. 
The spool piece also contains radial and thrust 
bearings for the stub shaft that is also part of the 


spool piece. The stub shaft transmits torque from the 
motor to the ball screw viaa slip coupling. The spool 
piece also contains the weighing platform. 


The weighing device is a spring-loaded 
platform with two magnets located on it. In normal 
service, weight of the hollow piston and control 
rod is transferred to the weighing device. If, during 
withdrawal, the weight of the rod or hollow piston is 
removed from the device, then the device will move 
upwards and trigger two external reed switches. The 
two external reed switches are called separation 
switches and, if either is opened, withdrawal motion 
is inhibited. There are two separation switch probes 
which are directly opposite each other. Each probe 
contains one switch. 


The spool piece is bolted to the CRD housing 
by bolts which pass through the outer tube flange. 
As mentioned above, the outer tube is also bolted to 
the CRD housing. The double bolting arrangement, 
combined with the back seat type lock feature 
discussed above, allows spool piece servicing 
without disturbing the drive. 


The motor bolts to the spool piece through a 
motor bracket. The motor is a stepping motor similar 
to that used in robotic and precision positioning 
applications. The use of the stepping motor is the 
major change from the configuration used in Europe. 
The European drives used a gear motor and, because 
of this, had less precise positioning capability than 
the ABWR FMCRD. In addition, the gear motor 
required increased maintenance compared to the 
stepping motor. The stepping motor design is based 
on motors that have had successful experience in 
industrial applications. 


There are two synchro-type position indicators 
located below the stepping motor. The synchros 
provide a continuous readout of the rod position 
during normal operation and are driven by gears 
from the motor shaft. 


The brake is mounted between the motor and the 
synchros. The brake serves to restrain the rod against 
withdrawal in the unlikely event that the scram line 
breaks. The brake is redundant with the ball check 
valve in mitigating the scram line break. It should 
be noted at this point that the check valve on the 


FMCRD has no function other than to mitigate the 
scram line break and to limit leakage during drive 
replacement. Some key FMCRD parameters are: 


Step Size 18.3 mm 
Movement 

Speed 30 mm/sec 
Scram 

Time 60% 1.7 sec 


The balance of the FMCRD system includes 
the scram position probes which are mounted 
on the outside of the CRD housing. The scram 
probe provides a position signal at 10%, 40% and 
60% insertion, as well as continuous full-in. The 
continuous full-in signal prevents the loss of position 
indication that would otherwise occur while the 
hollow piston is held by the scram latches at the top 
latched position. 


The probes use reed switches similar to the 
Locking Piston Control Rod Drive (LPCRD), as do 
the separation switch probes that are mounted on the 
side of the spool piece. The separation probes and 
associated circuits and equipment are considered 
important to safety and are therefore categorized 
as Class 1E. 


In addition to the FMCRD and probes, other 
items in the system include the power supply to 
motor (also known as the inverter controller), the 
Hydraulic Control Unit (HCU), scram piping, wiring 
and the CRD pump and its associated equipment. 


Power to the FMCRD is provided by a solid state, 
thyristor-driven power supply. The power supply is 
based on proven products with successful experience 
in industrial applications. The power supply is a 
variable voltage and frequency device which starts 
the motor at low speed, accelerates it to the normal 
run speed and then slows it when approaching the 
specified position. The power supply interfaces with 
the Rod Control and Information System (RCIS). 
The power supply interfaces with the Rod Control 
and Information System (RCIS). The power supply 
includes the capability to move the individual drive, 
while the RCIS provides the logic and control for 
overall control rod motion. 
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The DC power for the brake, which is an 
energize-to-release model, is supplied by an 
inverter which is integrated with the motor power 
supply cabinets. 


Hydraulic Control Units 

The HCU consists of a gas bottle and 
accumulator which are mounted on a frame. 
The HCU also includes the scram and scram 
pilot valves. In an ABWR, there is one HCU for 
every two FMCRDs rather than the one HCU 
per CRD as in past GE plants. The use of the 
paired arrangement allows savings in space and 
maintenance without sacrificing reliability or 
safety. The two FMCRDs on a given HCU are 
widely separated in the core so that there is no 
additional loss of shutdown margin if an HCU 
fails. 


Control Rod Drive Hydraulic System 

The ABWR Control Rod Drive Hydraulic 
System (CRDHS) supplies clean, demineralized 
water, which is regulated and distributed to provide 
charging of the HCU scram accumulators and 
purge water flow to the FMCRDs. The CRDHS 
is also the source of pressurized water for purging 
the RIP and the Reactor Water Cleanup (RWCU) 
System pump. 


The CRD pump is basically the same as 
that used in BWR/6 plants (i.e., a multi-stage 
centrifugal pump). The filtration system is 
basically also the same as that used on BWR/6. 


Main Steam System 


The purpose of the Main Steam System (MS) 
is to direct steam flow from the RPV steam outlet 
nozzles to the main turbine. A main steamline flow 
restrictor is provided in each steam outlet nozzle. 
It is designed to limit the flow rate in the event 
of a postulated steamline break. The system also 
incorporates provisions for relief of over-pressure 
conditions in the RPV. 


In the ABWR design, four 28-inch steamlines 
transport steam from the steam outlet nozzles on 
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the RPV through Reinforced Concrete Containment 
Vessel (RCCV) penetrations and then through the 
steam tunnel to the turbine. Main steam isolation 
valves (MSIVs) are installed in each steamline 
inboard and outboard of the RCCV penetrations. 
Eighteen safety/relief valves (SRVs) are installed 
on horizontal steamline headers and the discharge 
from each SRV is routed through the associated 
SRV discharge line to quenchers located in the 
suppression pool. Of the 18 SRVs, 8 provide the 
Automatic Depressurization System (ADS) function 
during an accident condition. Figure 3-13 is a 
simplified piping diagram of the MSS, and Figure 
3-14 illustrates the three dimensional configuration 
of the piping, MSIVs and SRVs. 


The MS is composed of several components 
and subsystems in addition to the above, which are 
necessary for proper operation of the reactor under 
various operating, shutdown and accident conditions. 
Some of these subsystems include: main steam 
bypass/drain subsystem, SRV and ADS, reactor head 
vent subsystem, and system instrumentation. 


Figure 3-13. Main Steam System 


Main Steam Isolation Valves 

Two MSIVs are welded in a horizontal run 
of each of the four main steam pipes. The MSIVs 
are designed to isolate primary containment upon 
receiving an automatic or manual closure signal, 
thus limiting the loss of coolant and the release of 
radioactive materials from the nuclear system. 


Each MSIV is a Y-pattern, globe valve and 
is powered by both pneumatic pressure and 
compressed spring force (Figure 3-15). The main 
disk assembly is attached to the lower end of the 
stem. Normal steam flow tends to close the valve 
and the pressure is over the disk. The bottom end 
of the valve stem or a stem disk attached to the 
stem closes a small pressure balancing hole in the 
main disk assembly. When the hole is open, it acts 
as an opening to relieve differential pressure forces 
on the main disk assembly. Valve stem travel is 
sufficient to provide flow areas past the wide open 
main disk assembly greater than the seat port area. 
The main disk assembly travels approximately 90% 
of the valve stem travel to close the main seat port 
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Figure 3-14. Main Steam System Piping Schematic 
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Figure 3-15. Main Steam Isolation Valve 


area; approximately the last 10% of the valve stem 
travel closes the pilot seat. The air cylinder actuator 
can open the main disk assembly with a maximum 
differential pressure of 1.38 MPaG (200 psig) across 
the isolation valve in a direction that tends to hold 
the valve close. The Y-pattern valve permits the inlet 
and outlet passages to be streamlined; this minimizes 
pressure drop during normal steam flow and helps 
prevent debris buildup on the valve seat. 


Attached to the upper end of the stem is an 
air cylinder that opens and closes the valve and 
a hydraulic dashpot that controls its speed. The 
speed is adjusted by hydraulic control valves in 
the hydraulic return lines bypassing the dashpot 
piston. 


The valve is designed to close quickly when 
nitrogen or air is admitted to the upper piston 
compartment to isolate the MS in the event of 
a LOCA, or other events requiring containment 
or system isolation to limit the release of reactor 
coolant. The valve can be test closed one at a time 
at a slow closing speed by admitting nitrogen or air 
to both the upper and lower piston compartments. 
This is to ensure that the slow valve closure does 
not produce a transient disturbance large enough to 
cause a reactor scram. 


When all the MSIVs are closed, the combined 


leakage through the MSIVs for all four steamlines 
is monitored to within the offsite radiation dose 
release limit. 


Nitrogen is used for the inboard MSIV operation 
because of the inerted drywell environment where 
the inboard MSIVs are located. Instrument air is 
used for the outboard MSIV operation. 


A separate pneumatic accumulator is provided 
and located close to each MSIV and supplies 
pressure as backup operating gas to assist in valve 
closure in the event of a failure of pneumatic supply 
pressure to the valve actuator. 


Safety/Relief Valves 

The SRV is a dual function, direct-acting valve 
and is classified as safety-related (Figure 3-16). The 
SRV is considered as part of the RCPB because the 
inlet side of the valve is connected to the steamline 
prior to the inboard MSIV. The SRV logic and 
solenoids are also classified and qualified as Class 
1E per the IEEE Standards. This classification is also 
applied to the ADS function and other associated 
systems. 
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Figure 3-16. Safety/Relief Valve 


MAIN TURBINE 


TURBINE 
ac Ao AA 4B BUILDING 


T S ~ ~ n~ T CONTROL 
[ a ™~ a Yr L BUILDING 


><} 
><} 


REACTOR 
OUTBOARD MSIV BUILDING 


X 
PF IES LIES AIS SORE | | Ps || P| | 9 | OR ORE OEY 
INBOARD MSIV ~X 7 X X R 


CONTAINMENT 
DRYWELL WALL 


REACTOR 


PRESSURE 
VESSEL 


RPV STEAM OUTLET 
NOZZLE/RESTRICTOR 


* ADS DESIGNATED SRV (TYPICA) 


Figure 3-17 MSIV and SRV Configuration 


The SRV capacity is sized to maintain primary 
system pressure below the ASME Code design 
limits. Figure 3-17 illustrates the SRV and MSIV 
configuration. 


The SRVs are located on the main steamlines 
between the RPV and the inboard MSIV. These 
valves provide three main protection functions: 


e Overpressure Safety Operation: The valves 
function as spring-loaded safety valves and open 
to prevent RCPB overpressurization. The valves 
are self-actuated by inlet steam pressure. 


e Overpressure Relief Operation: The valves are 
opened using a pneumatic actuator upon receipt 
of an automatic or manually initiated signal at 
the solenoid valve located on the pneumatic 
actuator assembly. This action pulls the lifting 
mechanism of the main disk, thereby opening 
the valve to allow inlet steam to discharge 
through the SRV. The SRV pneumatic operator 
is so arranged that, if it malfunctions, it does not 
prevent the SRV from opening when steam inlet 
pressure reaches the spring lift setpoint. 


e Automatic Depressurization System (ADS) 
Operation: The ADS valves open automatically 
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or manually in the power actuated mode 
when required during a LOCA. The ADS 
designated SRVs open automatically as part 
of the Emergency Core Cooling System 
(ECCS) as required to mitigate LOCA when it 
becomes necessary to reduce RCPB pressure 
to admit low pressure ECCS coolant flow to 
the reactor. 


Eight of the 18 SRVs are designated for 
the ADS function, and are equipped with three 
separate solenoid valves powered by 125 VDC. 
The other non-ADS SRVs are each equipped with 
one solenoid valve powered by 125 VDC. 


The SRVs are divided into five setpoint groups 
to relieve the RPV pressure in accordance with the 
RPV overpressure protection evaluation. 


A separate pneumatic accumulator is provided 
for each SRV function and is located close to 
each SRV to supply pressure for the purpose of 
valve actuation. SRVs that are designated for 
ADS function are provided with one additional 
accumulator for each valve. 


The SRVs can be operated individually in 
the power-actuated mode by remote manual 
switches located in the main control room. They 
are provided with position sensors which provide 
positive indication of SRV disk/stem position. 


Each SRV has its own discharge line with 
two vacuum breakers. The SRV discharge lines 
are sized so that the critical flow conditions occur 
through the valve. This prevents the conditions in 
the discharge lines of water hammer and pressure 
instability. The SRV discharge lines terminated 
at the quenchers located below the surface of the 
suppression pool (SP). 


Feedwater System 
(Nuclear Island) 


Two 22-inch feedwater lines transport 
feedwater from the feedwater pipes in the steam 
tunnel through RCCV penetrations to horizontal 


headers in the upper drywell which have three $7 FROM FW — 
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Figure 3-18. Feedwater System (Nuclear Island) 


Overview 


The ABWR Safety Systems design incorpo- 
rates three redundant and independent divisions 
of Emergency Core Cooling Systems (ECCS) and 
containment heat removal (Figures 4-1 and 4-2). The 
RPV has no external recirculation loops or large pipe 
nozzles below the top of the core region. This allows 
for a reduced capacity ECCS while still keeping 
the fuel covered for the full spectrum of postulated 
LOCAs even assuming a single failure. Each of the 
three divisions within the ECCS network has one 
high pressure and one low 
pressure inventory makeup 


system. The high pressure 
configuration consists of 
two motor-driven high pres- 
sure core flooders (HPCF), 
each with its own indepen- 
dent sparger discharging 
inside the shroud, and the 
steam-driven Reactor Core 
Isolation Cooling System 
(RCIC), which discharges 
into the feedwater injec- 


HPCF (C) 
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and are labeled LPFL. For small LOCAs that do not 
depressurize the reactor system, if the high pressure 
makeup is unavailable, an Automatic Depressuriza- 
tion System (ADS) actuates to vent steam from the 
reactor through the safety/relief valves (SRVs) to 
the suppression pool, and depressurizes the reactor 
vessel to allow the LPFL pumps to provide core 
coolant makeup flow. 


The RHR System has a dual role of providing 
reactor cooling for normal shutdown and providing 
core and containment cooling following a postu- 
lated LOCA. The ABWR RHR System has been 
improved such that core and 
suppression pool cooling are 


Steam 
5 


achieved simultaneously since, 
in the core cooling mode, the 
flow from the suppression pool 
passes through the RHR heat 
exchanger, and the supporting 
heat removal systems. Reac- 
tor Building Cooling Water 
(RCW) and Service Water 
(RSW) are also initiated upon 
a LOCA signal. 


Feedwater 


tion line. The HPCF pumps 
provide core makeup over 
the entire range of system operating pressures. The 
RCIC System, which has been upgraded to a safety 
system, has the dual function of providing high 
pressure ECCS flow following a postulated LOCA 
and reactor coolant inventory control for reactor 
isolation transients. The RCIC System, with its 
steam turbine-driven power, also provides a diverse 
makeup source during loss of all AC power events. 
The low pressure ECCS for the ABWR utilizes the 
three residual heat removal (RHR) pumps in the 
post-LOCA Low Pressure Flooding (LPFL) mode 


As a result of these im- 
provements in the ECCS net- 
work and the RHR System, there is an increase in 
the calculated safety performance margin of the 
ABWR over earlier BWRs. This has been con- 
firmed by a Probabilistic Risk Assessment (PRA) 
for the ABWR, which shows that the ABWR is a 
calculated factor of at least 10 better than BWR/5 
and BWR/6 in avoiding possible core damage from 
degraded events. 


Figure 4-1. ECCS Divisional Configuration 


In addition to the ECCS, there are several other 
important safety systems in the ABWR. These in- 
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Figure 4-2. ECCS Piping Schematic 


clude the Standby Gas Treatment System (SGTS), 
the Atmospheric Control System (ACS), the Flam- 
mability Control System (FCS), and the Standby 
Liquid Control System (SLCS). Finally, there is the 
Emergency Diesel Generator (EDG) System, which 
provides emergency AC power to operate the safety 
systems upon loss of offsite power. 


Emergency Core Cooling 
Systems 


High Pressure Core Flooder 

The primary purpose of the HPCF System (Fig- 
ure 4-3) is to maintain reactor vessel inventory after 
small breaks which do not depressurize the reactor 
vessel. HPCF systems, which are provided in two 
divisions, maintain an adequate coolant inventory 
inside the reactor vessel to limit fuel cladding tem- 
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peratures in the event of breaks in the reactor cool- 
ant pressure boundary. Electrical and mechanical 
separation between the two divisions is assured, in 
addition to the physical separation, by placing each 
division in a different area of the Reactor Building. 
The HPCF systems are initiated by either high pres- 
sure in the drywell or low water level in the vessel. 
They operate independently ofall other systems over 
the entire range of system operating pressures. 


Both HPCF systems take their primary suction 
from the condensate storage pool (CSP) with the 
suppression pool (SP) as a secondary source. The 
suction source transfers automatically upon low 
level in the CSP or high level in the SP. The pumps 
are located below the condensate storage and sup- 
pression pools’ normal water level to assure that 
net pump suction head is maintained. The HPCF 
System pump motors are powered by emergency 
diesel generators if auxiliary power is not available. 
The systems are also a backup to the RCIC System 
in response to transients. 


Figure 4-3. HPCF Schematic 
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Reactor Core Isolation Cooling 

The primary purpose of the RCIC System (Fig- 
ure 4-4) is to provide makeup water to the reactor 
vessel when the vessel is isolated. It is also part of 
the emergency core cooling network. The RCIC 
System uses a steam-driven turbine-pump unit and 
operates automatically in time and with sufficient 
coolant flow to maintain adequate water level in the 
reactor vessel for the following events: 


e Vessel isolated and maintained at hot standby. 


e Complete plant shutdown with loss of normal 
feedwater before the reactor is depressurized to 
a level where the shutdown cooling system can 
be placed in operation. 


e Loss of AC power. 


The RCIC System is contained within one divi- 
sion and consists of a steam-driven turbine which 
drives a pump assembly and the turbine and pump 
accessories. The system also includes piping, valves, 
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MAIN STEAM 
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and instrumentation necessary to implement several 
flow paths. The RCIC steam supply line branches 
off one of the main steamlines (leaving the RPV) 
and goes to the RCIC turbine with drainage provi- 
sion to the main condenser. The turbine exhausts to 
the suppression pool with vacuum breaking protec- 
tion. Makeup water is supplied from the condensate 
storage tank (CST) or the suppression pool with 
preferred source being the CST. RCIC flow is dis- 
charged to the feedwater injection line. 


Following a reactor scram, steam generation in 
the reactor core continues at a reduced rate due to 
the core fission product decay heat. The turbine con- 
denser and the feedwater system supply the makeup 
water required to maintain reactor vessel inventory. 
In the event the reactor vessel is isolated and the 
feedwater supply is unavailable, relief valves are 
provided to automatically maintain vessel pressure 
within desirable limits. The water level in the reac- 
tor vessel drops due to continued steam generation 
by decay heat. Upon reaching a predetermined low 
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Figure 4-4. RCIC Schematic 


level, the RCIC System is initiated automatically. 
The turbine-driven pump supplies water from the 
suppression pool or from the CST to the reactor ves- 
sel. The turbine is driven with a portion of the decay 
heat steam from the reactor vessel, and exhausts to 
the suppression pool. 


In the event of a LOCA, the RCIC System is 
designed to pump water into the vessel from full 
operating pressure down to approximately 150 
psig. During RCIC operation, the wetwell suppres- 
sion pool acts as the heat sink for steam generated 
by reactor decay heat. This results in a rise in pool 
water temperature. Heat exchangers in the RHR 
System are used to maintain pool water temperature 
within acceptable limits by cooling the pool water 
directly. 


Automatic Depressurization System 

The ADS logic is automatically initiated after 
a short delay if an RPV low water level signal is 
present concurrently with a high drywell pressure 
signal. The ADS logic is also automatically initiated 
if only the RPV low water level signal is present. 
This initiation will occur after a longer delay to al- 
low the high pressure ECCS a chance to restore the 
RPV water level to normal levels and thus avoid the 
ADS actuation. Both ADS initiation paths require 
an indication that at least one of the RHR or HPCF 
pumps is running before the initiation sequence is 
complete. 


ADS initiation is accomplished by redundant 
trip channels arranged in two divisionally separated 
logics that control two separate solenoid-operated 
pneumatic pilots on each ADS SRV. Either pilot 
can operate the ADS valve. These pilots control the 
pneumatic pressure applied by the accumulators 
and the High Pressure Nitrogen Gas Supply (HPIN) 
System. The DC power for the logic is obtained from 
two separate divisions within the Safety System 
Logic and Control (SSLC). This arrangement makes 
the ADS initiation logic single-failure proof. 


For ATWS mitigation, the ADS has an automatic 
and manual inhibit of the automatic ADS initiation 
to prevent ADS actuation during an ATWS. Auto- 
matic initiation of the ADS is inhibited unless there 
is a coincident low reactor water level signal and an 
average power range monitors (APRMs) downscale 
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signal. There are also main control room switches 
for the manual inhibit of automatic initiation of the 
ADS. 


The ADS can also be initiated manually. On a 
manual initiation signal, concurrent with positive 
indication of at least one of the RHR or HPCF pumps 
is running, the ADS function is initiated. 


Residual Heat Removal 

The RHR System removes residual heat dur- 
ing normal plant shutdown, reactor isolation and 
loss-of-coolant accident (LOCA). This system has 
six principal functions, each with a specific purpose 
(Figure 4-5): 


Low Pressure Flooder (LPFL) Mode (3 
loops)— The LPFL function provides a core cooling 
water supply to compensate for water loss beyond 
the normal control range from any cause up to and 
including the design basis (LOCA). During the 
LPFL mode, water is initially pumped from the 
suppression pool and diverted through the minimum 
flow lines until the injection valve in the discharge 
line is signaled to open on low reactor pressure. As 
the injection valve opens on low reactor pressure, 
flow to the RPV comes from the suppression pool, 
through the RHR heat exchanger, and the injection 
valve (blue flow path on the figure). This creates a 
flow signal that closes the minimum flow line. Loop 
flow is always through the RHR heat exchanger, 
which performs cooling. Safety requirements can 
be achieved even if any one loop is failed. Three 
individual loops are available. This mode is initiated 
automatically by a low water level in the reactor ves- 
sel or high pressure in the drywell (LOCA signal). 
Manual operation action may also initiate the LPFL 
mode. In addition, divisions B and C supply a small 
amount of water to the Flammability Control System 
(FCS) upon receipt of a LOCA signal. 


Suppression Pool Water Cooling Mode (3 
loops) This mode cools the suppression pool water 
during normal state below 49°C, which is the maxi- 
mum allowable temperature in order to retain the 
temperature below 97°C just after reactor coolant 
blowdown in the worst LOCA event. It is automati- 
cally initiated on high suppression pool temperature, 
and can also be manually initiated. Suction is taken 
from the suppression pool, the flow goes through the 
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RHR heat exchangers and is returned to the supres- 
sion pool (purple flow path). 


Reactor Shutdown Cooling Mode (3 loops)— 
This mode removes decay heat and sensible heat of 
the RPV, piping and reactor coolant in cooperation 
with the turbine main condenser and feedwater 
system operation after reactor shutdown. It can also 
cool down the reactor water below 60°C within 20 
hours after shutdown, and it makes refueling activity 
and equipment maintenance possible. After the RPV 
is at low pressure, suction is taken from the RPV 
(green flow path), the flow goes through the RHR 
heat exchangers and is returned to the RPV via the 
LPFL injection lines. 


Primary Containment Vessel Spray Cooling 
Mode (2 loops)—This mode is manually initiated 
and sprays the water from the suppression chamber 
pool into the drywell and wetwell after the event of a 
LOCA. This sprayed water in the drywell returns to 
the suppression chamber through vent pipes after the 
drywell water level reaches the vent pipe inlet level. 
It is mixed with the sprayed water in the wetwell and 
cooled by the RHR System heat exchangers, and 
then it is sprayed again (red flow path). 


This mode is available in divisions B and C. 


Figure 4-5. Residual Heat Removal System 


Each system can remove released coolant energy 
during an assumed feedwater line break, decay heat 
and generated heat by fuel cladding-H,O reaction 
accompanied by overheated fuel in conjunction 
with LPFL mode. It can also prevent the primary 
containment from exceeding its maximum operat- 
ing pressure and temperature. About 88% of this 
system flow rate is sprayed in the drywell and the 
remaining 12% is sprayed in the wetwell. It can also 
remove released iodine in the gas phase existing 
in the primary containment. The heat exchanger 
is cooled by the Reactor Building Closed Cooling 
System (RCW). 


Supplemental Fuel Pool Cooling (3 loops)— 
The three RHR loops are capable of providing 
supplemental fuel pool cooling. This mode will be 
used only when the reactor is shut down and the Fuel 
Pool Cooling System (FPCU) is unable to maintain 
the fuel pool water temperature below the required 
design limits. This is a manually initiated operation. 
Refer to the cyan flow path. 


AC-Independent Water Addition (1 loop)— 
The ACIWA mode of RHR Loop C provides a 
means for introducing water from Fire Protection 
(FP) through RHR Loop C piping and valves di- 
rectly into either the RPV, drywell spray header, or 


wetwell spray header. The purpose is to prevent core 
damage or, if core damage has already occurred, to 
terminate melt progression when AC power is not 
available from either onsite or offsite sources. The 
ACIWA mode of RHR provides manual capability to 
prevent core damage when all ECCS are lost. Refer 
to the orange flow path. 


Standby Gas Treatment 
System 


The Standby Gas Treatment System (SGTS) 
consists of two 100% capacity divisions (B&C) 
which treat and then discharge either primary or 
secondary containment air to the plant stack (Figure 
4-6). 


SGTS automatically starts, takes suction from 
the secondary containment following a LOCA, and 
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maintains a negative pressure of approximately 6 
mm water in the Secondary Containment. In ad- 
dition, SGTS will automatically process secondary 
containment atmosphere during refueling operations 
or primary containment atmosphere during purging 
operations ifa high radiation signal is received. The 
system can also be manually initiated. 


Each filter train consists ofa moisture separator, 
main electric heater, prefilter, primary HEPA filter, 
charcoal adsorber and secondary HEPA filter. The 
charcoal adsorber bed is 15 cm thick and removes 
more than 99% of elemental iodine or methyl io- 
dide. 


Atmospheric Control 
System 


The Atmospheric Control System (ACS) is de- 
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Figure 4-6. Standby Gas Treatment System 
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signed to establish and maintain an inert atmosphere 
(nitrogen) within the primary containment volume 
(PCV) (see Figure 4-7). An inert atmosphere is 
maintained in all operating modes except plant 
shutdown for refueling and/or maintenance. The 
system is sized to reduce containment oxygen con- 
centrations from atmospheric to <3.5% by volume 
in less than 4 hours. 


During plant startup, liquid nitrogen from the 
storage tanks is vaporized and injected into the 
wetwell and drywell regions of the containment. 
The nitrogen is mixed with the PCV atmosphere 
by the Drywell Cooling (DWC) System fans. Once 
inerting is complete, ACS provides nitrogen makeup 
to maintain the required oxygen concentration and 
maintain a slightly positive pressure within the 
PCV to preclude air in-leakage from the secondary 
containment. 


The ACS also has a Containment Overpressure 
Protection System (COPS) which is designed to 
relieve containment pressure against rare severe 
accident sequences in which the structural integrity 


Figure 4-7. Atmospheric Control System 


of the containment is challenged by overpressure. 
If the wetwell pressure reaches the setpoint of the 
inner rupture disk, the rupture disk opens and con- 
tainment gases from the wetwell airspace, which 
have been scrubbed by the suppression pool, are 
vented to atmosphere through the plant stack. Once 
the containment pressure has been reduced to a safe 
level and normal containment heat removal has been 
regained, the two normally open air-operated isola- 
tion valves in the COPS relief path can be manually 
closed to reestablish the containment boundary. The 
pressure setpoint is established to assure the contain- 
ment pressure does not exceed the Service Level C 
capability of the containment. 


Flammability Control 
System 


The Flammability Control System (FCS) con- 
trols the potential buildup of a combustible mixture 


of hydrogen and oxygen inside the PCV which 
could be produced from a design basis metal-water 
reaction and radiolysis of water during LOCA, or 
from beyond design basis events. It is comprised 
of two redundant thermal hydrogen and oxygen 
recombiner units located in two separate divisions 
(see Figure 4-8). Each unit is designed to maintain 
the concentration of oxygen below the flammability 
limit by recombining hydrogen and oxygen without 
relying on purging or release of radioactive material 
to the environment. These units are skid mounted 
with blowers, electric heaters, water spray coolers, 
piping, valves and instrumentation. The system 
is initiated manually by monitoring hydrogen and 
oxygen levels in the PCV. 


Standby Liquid Control 
System 


The Standby Liquid Control System (SLCS) 
provides a backup method to bring the nuclear re- 
actor to subcriticality and to maintain subcriticality 
as the reactor cools. The system makes possible an 
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orderly and safe shutdown in the event that not 
enough control rods can be inserted into the reactor 
core to accomplish shutdown in the normal man- 
ner. The system is sized to counteract the positive 
reactivity effect of shutting down from rated power 
to cold shutdown condition. 


The SLCS is automatically initiated or it can 
be manually initiated from the main control room 
to pump the neutron absorbing solution into the 
reactor. 


The system includes a boron solution tank, a 
test water tank, two positive displacement pumps, 
motor-operated injection and pump suction valves, 
and associated local piping, valves and controls 
in the Reactor Building outside the primary 
containment. The liquid is piped into the reactor 
vessel through the HPCF line downstream of the 
HPCF inboard check valve inside the primary 
containment. Figure 4-10 illustrates the system 
configuration. 


The boron absorbs thermal neutrons and 
thereby terminates the nuclear fission chain reac- 
tion in the fuel. The specified neutron absorber so- 
lution is sodium pentaborate. At all times, when it 
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Figure 4-8. Flammability Control System 
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is possible to make the reactor critical, the SLCS will 
be able to deliver enough sodium pentaborate solu- 
tion into the reactor to assure reactor shutdown. 


Emergency Diesel 
Generator System 


The Emergency Diesel Generator (EDG) 
System consists of three diesel engines and their 
respective combustion air intake system, starting 
air system, fuel oil system (from the day tank to the 
engine), lubricating oil system, engine jacket cooling 
water system, engine exhaust system and silencer, 
governor system, and generator with its excitation 
and voltage regulation systems. 


The three DGs are classified as Class 1E, 
safety-related and supply standby AC power to their 
respective Class 1E Electrical Power Distribution 


Figure 4-9. Standby Liquid Control System 


(EPD) System divisions (Divisions I, II, and II). 
The DG connections to the EPD System are shown 
on Figure 9-2. 


The DGs are sized to supply their load demand 
following a LOCA. The DG air start receiver tanks 
are sized to provide five DG starts without recharg- 
ing their tanks. 


ALOPP signal (bus undervoltage) from an EPD 
System medium voltage divisional bus automatically 
starts its respective DG, and initiates automatic load 
shedding and connection of the DG to its divisional 
bus. A DG automatically connects to its respective 
bus when DG required voltage and frequency condi- 
tions are established and required motor loads are 
tripped. After a DG connects to its respective bus, 
the non-accident loads are automatically sequenced 
onto the bus. 


LOCA signals from the RHR (Division I) and 
HPCF (Divisions II and III) Systems automatically 


start their respective divisional DG. After starting, 
the DGs remain in a standby mode (i.e., running at 
required voltage and frequency, but not connected 
to their buses), unless a LOPP signal exists. When 
LOCA and LOPP signals exist, load shedding occurs 
and required motor loads are tripped, and the DG au- 
tomatically connects to its respective divisional bus. 
After a DG connects to its respective bus, the LOCA 
loads are automatically sequenced onto the bus. 


A manual start signal from the main control 
room (MCR) or from the local control station in the 
DG area starts a DG. After starting, the DG remains 
in a standby mode, unless a LOPP signal exists. 


DGs start, attain required voltage and frequency, 
and are ready to load in <20 seconds after receiving 
an automatic or manual start signal. 
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When a DG is operating in parallel (test mode) 
with offsite power, a loss of the offsite power 
source used for testing ora LOCA signal overrides 
the test mode by disconnecting the DG from its 
respective divisional bus. 


The DG units are located in their respective 
divisional areas in the Reactor Building. The DG 
combustion air intakes are located above the maxi- 
mum flood level. The DG combustion air intakes 
are separated from DG exhaust ducts. Class 1E 
DG unit auxiliary systems are supplied electrical 
power from the same Class 1E division as the DG 
unit. Independence is provided between Class 1E 
divisions and also between Class 1 E divisions and 
non-Class 1E equipment. Each divisional DG with 
its auxiliary systems, is physically separated from 
the other divisions. 


Reactor Auxiliary 
Systems 


The main auxiliary systems in the ABWR 
Nuclear Island consist of the Reactor Water Cleanup 
(RWCVU) System, the Fuel Pool Cooling and Clean- 
up (FPCU) System, the Suppression Pool Cleanup 
(SPCU) System, the Reactor Building Cooling Water 
(RCW) System, the Reactor Building Service Water 
(RSW) System and the Drywell Cooling System 
(DWC). In addition, there are many other Nuclear 
Island and non-Nuclear Island auxiliary systems 
such as instrument and service air, condensate and 
demineralized water transfer, chilled water, HVAC, 
equipment drain, floor drain and other systems which 
are basically the same as on past BWR plants and 
are not covered here, since the designs are all well 
known. 


A short description of radioactive waste man- 
agement systems is also provided in this chapter. 


Reactor Water Cleanup 
System 


The RWCU System (Figures 5-1 and 5-2) 
consists of piping, valves, pumps, heat exchangers 
and filter-demineralizers which are used to remove 
impurities from the reactor primary coolant water to 
maintain water quality within acceptable limits dur- 
ing the various plant operating modes. The system 
is comprised of 2 100% pumps and 2 100% filter 
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demineralizers, only one of which is used during 
normal operation. Reactor water temperature is 
lowered to about 50°C through the tube side of the 
regenerative heat exchanger (RHX) and non-regen- 
erative heat exchangers (NRHX), and then cleaned 
by a filter demineralizer before being reheated by 
the RHX prior to return to the RPV. 


The pumps are canned rotor type that do not 
require seal maintenance, and the motors are cooled 
by continuous purge flow from the CRD System. 
Each pump has the capacity of 2% of rated feed- 
water flow. 


The RWCU also assists during reactor heatup by 
removing excess water from the primary system to 
either low level radwaste or to the condenser hotwell, 
and assists during reactor cooldown by providing 
water for the head spray nozzle on the RPV to speed 
up the vessel cooling. 


In plant emergency situations, the filter demin- 
eralizers and the regenerative heat exchanger can be 
bypassed, and the RWCU can provide an alternate 
decay heat removal path. 


In addition to MSS and Feedwater, RWCU is the 
only other normally operating process system with 
primary system high pressure water located outside 
of primary containment. Therefore special attention 
is paid to providing prompt system isolation in case 
of a postulated system pipe break in the reactor 
building. Inlet and outlet flows are measured and the 
difference, if large, will cause containment isolation 
valves to close. As an additional precaution there is 
a third remote manual value located inside contain- 
ment which can be used to effect isolation. 
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Figure 5-1. Reactor Water Cleanup System 
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Figure 5-2. RWCU Filter Demineralizers 


Fuel Pool Cooling 
and Cleanup and 
Suppression Pool 
Cleanup System 


The FPCU and SPCU Systems (Figures 5-3 
and 5-4) consist of piping, valves, heat exchangers 
and filter-demineralizers which are used to remove 
decay heat from the spent fuel storage pool and 
remove impurities from the water in the spent fuel 
pool and dryer/separator pool and suppression pool 
to maintain water quality within acceptable limits 
during various plant operating modes. The filter- 
demineralizers in the FPCU System are shared by 
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the SPCU System for cleaning the suppression pool 
water. The filter demineralizers are similar in design 
to that of the RWCU. The two systems are used dur- 
ing refueling outages as follows: 


e Prior to refueling, the SPCU System is used to 
cleanup and transfer water from the suppression 
pool and Condensate Storage Tank (CST) to fill 
the reactor well and dryer-separator pool. It is 
also used to drain the water from this area back 
to the suppression pool before reactor startup. 


¢ During the fuel movement portion of the refuel- 
ing outage, the FPCU System provides cooling 
to the spent fuel pool, reactor well and dryer- 
separator pool. RHR provides supplemental 
cooling in the event of a maximum heat load 
condition (e.g., full core off-load). 
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Figure 5-3. Fuel Pool Cooling and Cleanup System 
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e After refueling, the FPCU System is used to 
cleanup and transfer water from the reactor 
well and dryer-separator pool back to the sup- 
pression pool and drain the remaining water to 
radwaste. 


Both systems can be operated at the same time, 
each using one of the two filter demineralizers. The 
FPCU also can receive cooling support from the 
RHR if necessary to keep the fuel pool temperature 
within limits. 


Reactor Building 
Cooling Water System/ 
Reactor Building 
Service Water System 


The Reactor Building Cooling Water (RCW) 
System (Figure 5-5) consists of piping, valves, 
pumps and heat exchangers which are used to pro- 
vide cooling water to various systems in the Nuclear 
Island. The system is divided into three separate 
safety divisions, each with its own pumps and heat 
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Figure 5-4. Supression Pool Cleanup System 


exchangers, to provide cooling water to equipment 
in the three ECCS and RHR Safety divisions. This 
includes cooling for EDGs and for the Emergency 
Chilled Water (ECW) system which supports HVAC 
in key areas after postulated accidents. The RCW 
System also provides cooling water to equipment in 
non-safety systems such as the RWCU, FPCU and 
other systems and equipment that require cooling 
water. Non-safety heat loads are distributed between 
the three RCW systems. Figure 5-5 shows a typical 
configuration for RCW-A. Normally only one of 
the two 50% RCW pumps is operating. If a LOCA 
occurs, the non-safety heat loads are isolated and the 
second RCW pump started in each division so that 
the RCW can automatically respond to the accident 
heat removal requirements. 


The RSW System contains 2 100% pumps per 
division. To achieve low approach temperatures, 
provide easier maintenance and better performance, 
the ABWR uses flat plate heat exchangers; the 
pumps and heat exchangers are located in the Con- 
trol Building. The RCW heat exchangers are cooled 
by water from the Reactor Building Service Water 
(RSW) System and ultimate heat sink, which can 
be a cooling pond, cooling tower or natural body of 
water, depending on unique site conditions. 
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Figure 5-5. Reactor Building Cooling Water System and Reactor Building Service Water System 


Drywell Cooling System 


The purpose of the Drywell Cooling System 
(DWC) is to provide conditioned air/nitrogen to the 
drywell head area, upper and lower drywell, and 
shield wall annulus during normal plant operation, 
refueling outage and normal operation transients 
to cool equipment and maintain the drywell tem- 
perature within limits to ensure the integrity of the 
concrete structure. 


The system is comprised of three fans, three 
first-stage cooling coils supplied with RCW cooling 
water, two second-stage cooling coils supplied with 
chilled water, a distribution header and duct work 
(see Figure 5-6). Hot air is drawn from the upper 
drywell space over the first-stage coils, cooled and 
discharged to the common distribution header. At 
the header, part of the cooled air is ducted directly to 


the lower area of the drywell, control rod drive area, 
shield wall annulus and reactor vessel support skirt 
with the remainder passes through the second-stage 
cooling coils and is ducted to the upper drywell and 
drywell head area. 


Radwaste 


The radwaste facility has been improved com- 
pared to past designs. The use of filters and deep 
bed demineralizers without resin regeneration for 
condensate treatment permits a reduction in liquid 
radwaste effluent. The use of a total organic carbon 
oxidizer, polishing demineralizers in a lead-lag ar- 
rangement, a roughing demineralizer and mobile 
process equipment have improved processed water 
quality for plant reuse or offsite discharge. Han- 
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dling of dry solid waste is either by compaction or 
offsite volume reduction processing facilities. Spent 
resin, filter media and other types of wet waste 
material are dewatered and stored in high integrity 
containers. The impact of these improvements in 
the ABWR designs gives assurance that the total 
radwaste volume for the plant will be less than 21 
cubic meters per year (or 100 drums/year), reducing 
the radwaste volume by a factor of three compared 
to current U.S. operating plants. Annual releases to 
the environment from the ABWR radwaste systems 
are “as low as reasonably achievable” in accordance 
with guidelines set forth in 1OCFR50, Appendix I. 
These levels are several orders of magnitude below 
the NRC established limits in 10CFR20. 


Radwaste systems include the Liquid Radwaste 
Management (LRM) System, the Offgas (OG) Sys- 
tem, and the Solid Radwaste Management (DRM) 
System. Radwaste requirements and designs may 
vary depending on specific utility requirements; for 
example, whether supercompaction and/or incinera- 
tion is permitted or not. What follows is a typical 
design description. 


Liquid Radwaste Management System 
The Liquid Radwaste Management System 
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Figure 5-6. Drywell Cooling System 


(LRW) collects, monitors, and treats liquid ra- 
dioactive wastes for return to the primary system 
whenever practicable. The LRW System is designed 
to segregate, collect, store, and process potentially 
radioactive liquids generated during various modes 
of typical plant operation: Startup, Normal, Hot 
Standby, Shutdown, and Refueling. The LRW 
equipment is selected, arranged, and shielded to 
permit operation, inspection, and maintenance with 
minimum radiation exposure to personnel. Addi- 
tionally, the system is designed such that it may be 
operated to maximize the recycling of water within 
the plant, which would minimize the releases of 
liquid to the environment. All potentially radioactive 
liquid wastes are collected in sumps or drain tanks 
at various locations in the plant and transferred to 
collection tanks in the radwaste facility. 


The LRW block flow diagram is shown in Fig- 
ure 5-7. Waste processing is done on a batch basis. 
Each batch is sampled as necessary in the collection 
tanks to determine concentrations of radioactivity 
and other contaminants. The LRW is composed of 
four subsystems which are designed to collect, treat, 
and recycle or discharge the different categories 
of waste water. The four subsystems are the Low 
Conductivity Subsystem, High Conductivity Sub- 
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system, Chemical Waste Subsystem and Detergent 
Waste Subsystem. 


Low Conductivity Subsystem: This subsystem 
collects and processes water of relatively low conduc- 
tivity. Equipment drains and other low-conductivity 
wastes (LCW) are collected, filtered for removal of 
insolubles, processed for removal of total organic 
carbon (TOC) contaminants, demineralized on a 
mixed resin, deep-bed demineralizers for removal 
of solubles, processed through a second polishing 
demineralizer, and then routed to condensate storage 
unless high conductivity or TOC requires recycling 
for further treatment. A second LCW filter, arranged 
in parallel with the first, is also provided. 


High Conductivity Subsystem: This subsys- 
tem collects and processes dirty radwaste [i.e., water 
of relatively high conductivity and solids content 


Figure 5-7. Liquid Radwaste System 


(HCW)]. Floor drains are typical of wastes found in 
this subsystem. These wastes are collected, filtered 
for removal of insolubles, demineralized on a rough- 
ing demineralizer, processed through two polishing 
demineralizers, and then released via the offsite 
discharge pathway unless low condensate storage 
tank inventory or low dilution water flow requires 
plant reuse, or high radioactivity requires recycling 
for further treatment. Protection against inadvertent 
release of liquid radioactive waste is provided by 
design redundancy, instrumentation for the detec- 
tion and alarm of abnormal conditions, automatic 
isolation, and administrative controls. 


Chemical Waste Subsystem: This subsystem 
collects and processes chemical wastes from the 
radioactive laboratory and chemical decontamina- 
tion operations. Normally, chemical drain wastes of 
low activity are treated by filtration, sampled and 
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released via the liquid discharge pathway on a batch 
basis. However, mobile evaporation can be used as 
a process option for chemical drains. 


Detergent Waste Subsystem: This subsystem 
collects and processes detergent wastes from per- 
sonnel showers and laundry operations. Normally, 
laundry drain wastes and other detergent wastes of 
low activity are treated by filtration, sampled and 
released via the liquid discharge pathway on a batch 
basis. However, mobile filtration and/or evaporation 
can be used as a process option for detergent drains. 
During periods of high laundry use, such as during 
outages, excess laundry above the capacity of the 
plant laundry will be sent offsite for processing by 
a licensed vendor. 


Offgas System 
The Gaseous Waste Management or Offgas 
System (OG) processes and controls the release of 
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gaseous radioactive effluents to the site environs 
so as to maintain the exposure of persons outside 
the controlled area and personnel working near the 
system components to as low as reasonably achiev- 
able. The OG process flow diagram is shown in 
Figure 5-8. 


The main condenser evacuation system removes 
the noncondensable gases from the main condenser 
and discharges them to the OG. The evacuation 
system consists of two 100% capacity, multiple-ele- 
ment, two-stage steam jet air ejectors (SJAEs) with 
intercondensers, for normal station operation, and 
mechanical vacuum pumps for use during startup. 


The OG System receives air and noncondens- 
able gases from the SJAEs and processes the efflu- 
ent for the decay and/or removal of gaseous and 
particulate radioactive isotopes. The OG System 
also reduces the possibility of an explosion from 
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Figure 5-8. Offgas System 


the buildup of radiolytic hydrogen. This is ac- 
complished by the recombination of the radiolytic 
hydrogen and oxygen under controlled conditions 
within a catalytic recombiner. This process strips 
the condensables and reduces the volume of gases 
being processed. 


The remaining noncondensables (principally air 
with traces of krypton and xenon) are passed through 
activated charcoal beds which are operated at an 
ambient temperature (25°C) and provide a holdup 
volume to allow time for the krypton and xenon 
to decay. After processing, the gaseous effluent is 
monitored and released to the environs through the 
plant stack. 


Solid Radwaste Management System 
The Solid Radwaste Management System, also 
known as the Dry Radwaste Management (DRM) 
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System, provides for the safe processing, handling, 
packaging, and short-term storage of radioactive 
wet and dry solid waste. The DRM is designed to 
provide dewatering/compaction and packaging for 
radioactive wastes produced during startup, normal 
operation, and shutdown and to store these wastes, 
as required, in the Radwaste Building. The DRM 
block flow diagram is shown in Figure 5-9. 


Wet waste produced by this system is transferred 
to fill stations where it is loaded into high integrity 
containers (HICs) and dewatered. Dry active waste is 
surveyed and disposed of whenever possible via the 
provisions of 10CFR20.302(a). The remaining com- 
bustible and noncombustible waste is compacted and 
loaded into containers for offsite disposal or loaded 
into sea vans for offsite processing, which includes 
incineration and supercompaction, and disposal. 
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Figure 5-9. Solid Radwaste Flow 
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Introduction and 
Summary 


The design of the Advanced Boiling Water Re- 
actor (ABWR) core and fuel is based on the proper 
combination of many design variables and operating 
experience. These factors contribute to the achieve- 
ment of high reliability, excellent performance, and 
improved fuel cycle economics. 


The core and fuel design methods employed for 
design analyses and calculations have been verified 
by comparison with data from operating plants, 
gamma scan measurements, testing facilities, and 
Monte Carlo neutron transport calculations. GE con- 
tinually implements advanced core and fuel design 
technology, such as control cell core, spectral shift 
operation, axially varying gadolinia and enrichment 
zoning, fuel cladding with improved corrosion re- 
sistance, part length fuel rods, interactive channels, 
and wider water gaps in the ABWR core. As these 
technological improvements are added, the core 
and fuel design parameters are optimized to achieve 
better fuel cycle economics, while improving fuel 
integrity and reliability and while maintaining over- 
all reactor safety. 


The reactor lattice configuration and fuel ele- 
ment design for the ABWR are basically the same 
as employed in previous GE designed plants operat- 
ing around the world. Key features of the ABWR 
reactor core design are summarized in the following 
paragraphs: 


e TheABWR core mechanical design is based 
on conservative application of stress limits, operat- 
ing experience, and experimental test results. The 


moderate pressure levels characteristic of a direct 
cycle reactor, approximately 1000 psia (6900 kPa), 
reduce cladding temperatures and stress levels. 


e The low coolant saturation temperature, 
high heat transfer coefficients, and neutral water 
chemistry of the ABWR are significant, advanta- 
geous factors in minimizing Zircaloy clad tempera- 
ture and associated temperature-dependent corrosion 
and hydride buildup. This results in improved clad- 
ding performance at high burnup. 


e The basic thermal and mechanical criteria 
applied in the ABWR design have been proven by ir- 
radiation of statistically significant quantities of fuel. 
The design heat fluxes and linear heat generation 
rates are similar to values proven in fuel assembly 
irradiation in the large fleet of operating BWRs. 


e In-reactor experience of fuel components 
acquired in the existing fleet is applicable to the 
ABWR. 


e Because of the large negative moderator 
density (void) coefficient of reactivity, the ABWR 
has a number of inherent advantages, including (1) 
ease of control using coolant flow as opposed to 
control rods for load following, (2) inherent self- 
flattening of the radial power distribution, (3) spatial 
xenon stability, and (4) ability to override xenon in 
order to follow load. The inherent spatial xenon 
stability of the ABWR is particularly important for 
large-sized plants, and permits daily load following 
over a large range of core power levels. 


¢ The moderate power density and power distri- 
butions used in sizing the ABWR core include 


margins providing for operational flexibility. 
e The ABWR fuel assembly pitch is 0.1 inch 
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more than the conventional BWR fuel assembly 
pitch so that it can accommodate more water in 
the bypass gaps between the fuel assemblies, 
which improves cold shutdown margin and core 
thermal hydraulic stability and results in milder 
response for pressurization transients. 


Core Configuration 


The reactor core of the ABWR is arranged as an 
upright cylinder containing a large number of fuel 
assemblies (872) located within the reactor vessel. 
The coolant flows upward through the core. The core 
arrangement (plan view) and the lattice configura- 
tion are shown in Figures 6-1 and 6-2, respectively. 
Important components of this arrangement are 
described in the following pages. 


As can be seen from Figure 6-1, the ABWR 
reactor core is comprised of fuel assemblies, control 
rods and nuclear instrumentation. The fuel assembly 
and control rod mechanical designs are basically the 
same as used in all but the earliest GE boiling water 
reactors; however, evolutionary improvements have 
been made to these components throughout the his- 
tory of the GE BWR. The current generation of these 
components will be described below for application 
to the ABWR. 


Fuel Assembly 
Description 


The BWR fuel assembly consists of a fuel 
bundle and a channel. The fuel bundle contains the 
fuel rods and the hardware necessary to support and 
maintain the proper spacing between the fuel rods. 
The channel is a Zircaloy box which surrounds the 
fuel bundle to direct the core coolant flow through 
the bundle and also serves to guide the movable 
control rods. 


The GE14 product line is currently GE’s most 
advanced fuel assembly design. The GE14 designs 
contain a 10x10 array of 78 full length fuel rods, 


14 part length rods which span roughly two-thirds 
of the active core, and two large central water rods. 
Additionally, a new fuel assembly is presently under 
development. The new assembly is anticipated to be 
designed, licensed and available for ABWR initial 
cores. Thus, GE provides two 10x10 fuel designs 
for the ABWR. 


Figure 6-3 shows the GE14 design with the 
major components identified. The cast stainless steel 
lower tie plate includes a conical section which seats 
into the fuel support and a grid which maintains the 
proper fuel rod spacing at the bottom of the bundle. 
The cast stainless steel upper tie plate maintains the 
fuel rod spacing at the top of the bundle and provides 
the handle that is used to lift the bundle. 


The fuel bundle assembly is held together by 
eight tie rods located around the periphery of the fuel 
bundle. Each tie rod has a threaded lower end plug 
which screws into the lower tie plate and a threaded 
upper end plug which extends through a boss in the 
upper tie plate and is fastened with a nut. A lock tab 
washer is included under the tie rod nut to prevent 
rotation of the tie rod and nut. The part-length rods 
also have lower end plugs which are threaded into 
the lower tie plate to prevent movement of the rods 
during shipping or handling with the bundle oriented 
horizontally. The upper end plugs of the full length 
fuel rods and water rods have extended shanks that 
protrude through bosses in the upper tie plate to 
accommodate the differential growth expected for 
high exposure operation. Expansion springs are also 
placed over each upper end plug shank to assure that 
the full length fuel rods and water rods are properly 
seated in the lower tie plate. 


Eight high performance Zircaloy ferrule spacers 
are located axially to maintain the proper rod spac- 
ing along the length of the fuel bundle, to prevent 
flow-induced vibration, and to enhance the critical 
power performance. These spacers are captured in 
the correct axial locations by pairs of tabs welded 
to one of the two water rods. The water rod with 
tabs is placed through the spacers and then rotated 
to capture the spacers. Once assembled, rotation 
of the water rod with tabs is prevented by a square 
lower end plug which fits into a square hole in the 
lower tie plate. 
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Figure 6-1. ABWR Core Configuration 
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Figure 6-2. Four Bundle Fuel Module (Cell) pellets, a retainer spring assembly, and lower and 
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Figure 6-3. GE14 Fuel Assembly 


upper end plugs. The fuel rods are loaded with UO, 
or (U,Gd)O, fuel pellets as required for shutdown 
margin control and power shaping. A plenum spring 
is used to apply a preload to the fuel column to pre- 
vent fuel from shifting and being damaged inside the 
fuel rod during shipping and handling. This plenum 
spring is also shown in Figure 6-4. 


The lower end plug is welded to the lower end 
of the cladding before loading any of the internal 
fuel rod components mentioned above. After loading 
all internal components, the fuel rod is evacuated, 
then backfilled with helium. The upper end plug is 
inserted into the top end of the fuel rod, compressing 
the retainer spring, and welded to the cladding. 


GE14 Key Fuel Design Features 

The GE14 design utilizes several key design 
features, including part-length fuel rods, high per- 
formance spacers, low pressure drop upper tie plate, 
high pressure drop lower tie plate with debris filter, 
large central water rods, and interactive channels. 
These key design features are individually discussed 


below. 


Part Length Rods 

Part length fuel rods (PLRs) were introduced 
with the GE11 fuel design and have been used in 
all subsequent GE designs. For GE14, the 14 PLRs 
terminate just above the fifth spacer to provide in- 
creased flow area and reduce the two-phase pressure 
drop. This reduction in two-phase pressure drop 
leads to an improvement in core and channel stability 
and allows for an increase in the cladding diameter to 
maximize the fuel weight for a given overall pressure 
drop. In addition, the PLRs increase the moderator 
to fuel ratio in the top of the core to improve cold 
shutdown margins and fuel efficiency. 
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Figure 6-4. Channel Fastener Assembly 


High Performance Spacers 

The high performance Zircaloy ferrule spacer 
was developed to provide excellent critical power 
performance with acceptable pressure drop char- 
acteristics. This spacer concept is also used in a 
number of previous products. Eight spacers are 
used to maintain rod bow and flow-induced vibration 
margins for the reduced diameter 10x10 fuel rods of 
the GE14 design, while at the same time providing 
additional critical power capability. 


Low Pressure Drop Upper Tie Plate 

The upper tie plate (UTP) is designed to mini- 
mize two-phase pressure drop to improve fuel sta- 
bility performance and reduce the pumping power 
required to drive core flow. 


Lower Tie Plate with Debris Filter 

As discussed previously, the use of part length 
rods and the low pressure drop upper tie plates to 
reduce two-phase pressure drop allows for retaining 
adequate single-phase pressure drop at the lower tie 
plate for thermal-hydraulic stability performance. 
In addition, it allows for the use of restricted flow 
paths in the lower tie plate, which serve to effectively 
filter debris. Figure 6-5 shows a top view of one of 
three possible debris filter LTPs. Debris filter LTP 
designs are standard with all GE fuel designs. Any 
of GE’s debris filter LTPs can be applied to ABWR, 
as they all have the same hydraulic resistance. 


Large Central Water Rods 

One of the basic characteristics of a BWR is that 
it is under-moderated at operating temperatures. In 
order to improve moderation and fuel efficiency, fuel 
rods are removed from the center of the fuel bundle 
and replaced with water rods to provide a zone for 
non-boiling water flow. The GE14 design includes 
two large central water rods to replace eight fuel rod 
locations and provide improved moderation. 


Interactive Channels 

The interactive fuel channel design has an 
optimized cross section, as illustrated in Figure 6- 
6, which includes thick corners where stresses are 
highest and thinner flat sides where stresses are low. 
This design minimizes the amount of Zircaloy-2 
material in the channel in order to improve nuclear 
efficiency, increases the moderator in the bypass re- 
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Figure 6-5. Top View of Debris Filter Lower Tie Plate 


gion for improved reactivity and hot-to-cold swing, 
and increases the control rod clearance. 


Control Rod Description 


As shown in Figures 6-1 and 6-2, cruciform 
shaped control rods are configured for insertion 
between every four fuel assemblies comprising 
a module or “cell”. The four assemblies in a cell 
provide guidance for insertion and withdrawal of 
the control rods. 


The control rods perform dual functions of 
power distribution shaping and reactivity control. 
Power distribution in the core is controlled during 
operation of the reactor by manipulation of selected 
patterns of rods. The rods, which enter from the 
bottom of the reactor, are positioned in such a man- 
ner as to maintain the core in a critical state, and to 
control the radial power distribution. These groups 
of control elements which are inserted during power 
operation experience a somewhat higher duty cycle 
and neutron exposure than the other rods, which are 
used mainly for reactor shutdown. 


The reactivity control function requires that all 
rods be available for either reactor “scram” (prompt 
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Figure 6-6. Cross Section of Interactive Channel 


shutdown) or reactivity regulation. Because of this, 
the control elements are mechanically designed 
to withstand the dynamic forces resulting from a 
scram. In the ABWR, they are connected to bot- 
tom-mounted drive mechanisms which provide 
electric-driven fine motion axial positioning control 
for reactivity regulation, as well as a hydraulically 
actuated rapid scram insertion function. The design 
of the rod-to-drive connection permits each control 
rod to be attached or detached from its drive during 
refueling without disturbing the remainder of the 
control functions. The bottom-mounted drives per- 
mit the entire control function to be left intact and 
operable for tests with the reactor vessel open. 


Typically, the cruciform control rods contain 
stainless steel tubes in each wing of the cruciform 
filled with boron carbide (B,C) powder compacted 
to approximately 75% of theoretical density. The 
tubes are seal welded with end plugs on either end. 
Stainless steel balls are used to separate the tubes into 
individual longitudinal compartments. The stainless 
steel balls are held in position by a slight crimp in the 
tube. The individual tubes act as pressure vessels to 
contain the helium gas released by the boron-neutron 
capture reaction. 


The tubes are held in cruciform array by a 
stainless steel sheath extending the full length of 
the tubes. A top casting and handle, shown in Figure 
6-7, aligns the tubes and provides structural rigidity 


at the top of the control rod. Rollers, housed by the 
top casting, provide guidance for control rod inser- 
tion and withdrawal. A bottom casting is also used 
to provide structural rigidity and contains positioning 
rollers and a coupler for connection to the control 
rod drive mechanism. The castings are welded into 
a single structure by means of a small cruciform post 
located in the center of the control rod. Control rods 
are cooled by the core leakage (bypass) flow. 
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Figure 6-7. ABWR Control Rod 


In addition to boron carbide, hafnium absorber 
may be placed in the highest burnup locations of se- 
lect control rods, the full length outside edge of each 
wing and, optionally, the tip of each wing. Hafnium 
is a heavy metal with excellent neutron absorbing 
characteristics and does not swell at high burnups. 


Core Orificing 


Control of the core flow distribution among the 
fuel assemblies is accomplished by fixed orifices. 
These orifices are located in the fuel support pieces 
and are not affected by fuel assembly removal and 
replacement. The core is divided into two orifice 
zones. The outer zone of fuel assemblies, located 
near the core periphery, has more restrictive orifices 
than the inner zone. Thus, flow to the higher power 
fuel assemblies is increased. The orificing of all 
fuel assemblies increases the thermal-hydraulic 
stability margin of both the core and individual fuel 
channels. 


Other Reactor Core 
Components 


In addition to fuel assemblies and control rods, 
there are also in-core monitoring components and 
neutron sources located in the reactor core. 


SRNM Assembly 

There are 10 Startup Range Neutron Monitor- 
ing (SRNM) assemblies, each consisting of a fixed 
position in-core regenerative fission chamber sen- 
sor located slightly above the midplane of the fuel 
region. The sensors are contained within pressure 
barrier dry tubes located in the core bypass water 
region between fuel assemblies and distributed 
evenly throughout the core. The signal output exits 
the bottom of the dry tube under the vessel. 


LPRM Assembly 


There are 52 Local Power Range Monitoring 
(LPRM) assemblies evenly distributed throughout 
the reactor core. Each assembly extends vertically 
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in the core bypass water region at every fourth in- 
tersection of the fuel assemblies and contains four 
fission chamber detectors evenly spaced at four 
axial positions adjacent to the active fuel. Detector 
signal cables are routed within the assembly toward 
the bottom of the reactor pressure vessel where the 
assembly penetrates the vessel pressure boundary. 
Below the vessel bottom, the pressure boundary is 
formed by an extended portion of the in-core instru- 
ment housing tube that houses the assembly. 


The LPRM assembly enclosing tube also houses 
the automatic traversing in-core probe (ATIP) cali- 
bration tube. The ATIP sensor moves within the cali- 
bration tube to provide an axial scan of the neutron 
flux at that LPRM assembly location. A schematic 
of the ATIP, LPRM and SRNM assemblies is shown 
in Figure 6-8. 


Neutron Sources 

Several antimony-beryllium startup sources are 
located within the core. They are positioned verti- 
cally in the reactor by “fit-up” in a slot (or pin) in 
the upper grid and a hole in the lower core support 
plate (Figure 6-9). The compression of a spring at 
the top of the housing exerts a column-type loading 
on the source. Though anchored firmly in place, the 
sources can easily be removed, but they need not be 
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Figure 6-8. ABWR ATIP, LPRM and SRNM Schematic 
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Figure 6-9. Neutron Source Schematic 
disturbed during refueling. 


The active portion of each source consists of a 
beryllium sleeve enclosing two antimony-gamma 
sources. The resulting neutron emission strength 
is sufficient to provide indication on the source 
range neutron detectors for all reactivity conditions 
equivalent to the condition of all rods inserted prior 
to initial operation. 


The active source material is entirely enclosed 
in a stainless steel cladding. The source is cooled 
by natural circulation of the core leakage flow in 
the annulus between the beryllium sleeve and the 
antimony-gamma sources. 


Core Nuclear Design 


The reactor core is designed to operate at rated 
power without any limitations, while delivering the 
total cycle length and energy desired by the utility. 
These design goals are achieved by designing with 
sufficient margin to thermal and reactivity limits to 
accommodate the types of uncertainties encountered 
in actual operation. Based on its extensive experi- 
ence in BWR core design, GE has developed a 
consistent set of design margins to ensure meeting 
these objectives without compromising overall ef- 
ficiency due to the use of undue conservatism. 


Core Configuration 

The ABWR core map is illustrated in Figure 
6-1. There are 872 fuel assemblies, 205 control rods 
and 52 LPRM assemblies. Also the core periphery 
zone with more restrictive inlet flow orifices is 
shown. 


Additionally, typical control cell locations are 
shown in Figure 6-1. ABWR can employ the Con- 
trol Cell Core (CCC) operating strategy in which 
control rod movement to offset reactivity changes 
during power operations is limited to a fixed group 
of control rods. Each of these control rods and its 
four surrounding fuel assemblies comprise a control 
cell. All other control rods are normally withdrawn 
from the core while operating at power. 


Low reactivity fuel assemblies are placed on 
the core periphery and in the control cells, to reduce 
neutron leakage and provide for control rod mo- 
tion adjacent to low power fuel, respectively. For 
an initial core, the low reactivity fuel is comprised 
of natural uranium or low enrichment fuel. For a 
reload core, the low reactivity fuel is typically the 
high exposure fuel; fresh and low exposure fuel are 
scatter loaded in the remaining core fuel assembly 
locations. 


Core Nuclear Characteristics 

Reactivity Coefficients: In a boiling water 
reactor, two reactivity coefficients are of primary 
importance: the fuel Doppler coefficient and the 
moderator density reactivity coefficient. The mod- 
erator density reactivity coefficient may be broken 
into two components: that due to temperature and 


that due to steam voids. 


e Fuel Doppler Reactivity Coefficient: As 
in all light water moderated and low enrichment 
reactors, the fuel Doppler reactivity coefficient is 
negative and prompt in its effect, opposing reactor 
power transients. When reactor power increases, 
the UO, temperature increases with minimum time 
delay and results in higher neutron absorption by 
resonance capture in the U-238. 


e Moderator Density Reactivity Coef- 
ficient: During normal plant operations, the steam 
void component of the moderator density reactivity 
coefficient is of prime importance. The steam void 
component is large and negative at all power lev- 
els. This steam void effect results in the following 
operating advantages: 


—Xenon Override Capability: Since the 
steam void reactivity effect is large com- 
pared with xenon reactivity, the ABWR 
core has the capability of overriding the 
negative reactivity introduced by the build- 
up of xenon following a power decrease. 


—Xenon Stability: The steam void reactiv- 
ity is the primary factor in providing the 
high resistance to spatial xenon oscillations 
in a boiling water reactor. Xenon instabil- 
ity is an oscillatory phenomenon of xenon 
concentration throughout the reactor that is 
theoretically possible in any type of reactor. 
These spatial xenon oscillations give rise to 
local power oscillations which can make it 
difficult to maintain the reactor within its 
thermal operating limits. Since these oscil- 
lations can be initiated by reactor power 
level changes, a reactor which is susceptible 
to xenon oscillations may be restricted in 
its load-following capability. The inherent 
resistance of the ABWR to xenon instability 
permits significant flexibility in load-fol- 
lowing capability. 


—Load Changing by Flow Control: 
Since the fuel Doppler reactivity opposes 
a change in load, the void effect must be 
(and is) larger than the fuel Doppler effect 
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in order to provide load changing capability 
by flow (or moderator density) control. The 
ABWR is capable of daily load following 
between 100% and 50% power by adjusting 
core flow, with only minor adjustments to 
the control rod pattern at low power. 


Reactivity Control 

Reactor shutdown control in BWRs is assured 
through the combined use of the control rods and 
burnable poison in the fuel. Only a few materials 
have nuclear cross sections that are suitable for 
burnable poisons. An ideal burnable poison must 
be essentially depleted in one operating cycle so 
that no residual poison exists to penalize the cycle 
length. It is also desirable that the positive reactivity 
from poison burnup match the almost linear decrease 
in fuel reactivity from fission product buildup and 
U-235 depletion. A self-shielded burnable poison 
consisting of digadolinia trioxide (Gd,O,), called 
gadolinia, dispersed in selected fuel rods in each 
fuel assembly provides the desired characteristics. 
The gadolinia concentration is selected such that the 
poison is essentially depleted during the operating 
cycle. Gadolinia has been used in GE BWRs since 
the early 1970s, and has proven to be an effective 
and efficient bumable poison. In addition to its use 
for reactivity control, gadolinia is also used to im- 
prove axial power distributions by axial zoning of 
the burnable poison concentration. 


The core is designed so that adequate shutdown 
capability is available at all times. To permit margin 
for credible reactivity changes, the combination of 
control rods and burnable poison has the capability to 
shut down the core with the maximum worth control 
rod fully withdrawn. This capacity is experimentally 
demonstrated when reactivity alternations are made 
to the reactor core, such as during the initial core 
startup, and during each startup after a refueling 
outage. 


Fuel Management 

The flexibility of the ABWR core design per- 
mits significant variation of the intervals between 
refueling. The first shutdown for refueling can 
occur anywhere from one to two years after com- 
mencement of initial power operation. Thereafter, 
the cycle length can be varied up to 24 months with 
GE14 fuel. The desired cycle length can be obtained 
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by adjusting both the refueling batch size and the 
average enrichment of the reload bundles. 


The average bundle enrichments and batch 
sizes are a function of the desired cycle length. 
The initial ABWR core has an average enrichment 
ranging from approximately 1.7 wt% U-235 to 
approximately 3.2 wt% U-235 for cycle lengths 
ranging from one to two years. For ABWR reload 
cores using GE14 fuel, the average bundle enrich- 
ment is roughly 4.2 wt% U-235 witha reload batch 
fraction of 35% for a two year cycle. 


Neutron Monitoring 
System 


The Neutron Monitoring System (NMS) is 
a system of in-core neutron detectors and out- 
of-core electronic monitoring equipment. The 
system provides indication of neutron flux, which 
can be correlated to thermal power level for the 
entire range of flux conditions that can exist in 
the core. There are four subsystems in the NMS: 
the Startup Range Neutron Monitoring (SRNM) 
Subsystem, the Power Range Neutron Monitor- 
ing (PRNM) Subsystem [comprised of the Local 
Power Range Monitors (LPRM) and Average 
Power Range Monitors (APRM)], the Automatic 
Traversing In-Core Probe (ATIP) Subsystem, 
and the Multi-Channel Rod Block Monitoring 
(MRBM) Subsystem. 


The NMS design has been greatly simplified 
for ABWR application. Key simplification fea- 
tures include the SRNM, period-based trip logic, 
and automation of the Traversing In-core Probe 
(TIP) System. The SRNMs replace the separate 
Source Range Monitor (SRM) and Intermediate 
Range Monitor (IRM) found in conventional 
BWRs. Use of these fixed in-core SRNM detectors 
eliminates the drive mechanism and the associated 
control systems for the moveable SRM and IRM 
detectors. IRM range switches have been elimi- 
nated by incorporating a period-based trip design 
in the startup power range. Hence, operability 
is greatly improved and accidental trips due to 


manual range switching are eliminated. TIP System 
operation for core flux mapping and calibrating the 
power range monitors has been fully automated in 
the ABWR design, thereby substantially enhancing 
operability. 


Startup Range Neutron Monitoring 
(SRNM) Subsystem 

The SRNM Subsystem monitors the neutron 
flux from the source range to approximately 15% 
of the rated power. The SRNM Subsystem provides 
neutron flux related trip inputs (flux level and period) 
to the Reactor Protection System (RPS), including a 
non-coincident trip function for refueling operations 
and a coincident trip function for other modes of 
operation. The SRNM Subsystem has 10 channels 
where each channel includes one detector installed 
at a fixed position within the core. 


Power Range Neutron Monitoring 
(PRNM) Subsystem 

The PRNM Subsystem provides flux informa- 
tion for monitoring the average power level of the 
reactor core. It also provides information for moni- 
toring the local power level. The PRNM Subsystem 
monitors local thermal neutron flux up to 125% of 
rated power, and overlaps with part of the SRNM 
range. 


The PRNM Subsystem consists of two subsys- 
tems: 


e Local Power Range Monitoring (LPRM) Sub- 
system 


e Average Power Range Monitoring (APRM) 
Subsystem 


The LPRM Subsystem continuously monitors 
local core neutron flux. It consists of 52 detector 
assemblies with 4 detectors per assembly. The 208 
LPRM detectors are separated and divided into four 
groups to provide four independent APRM signals. 
The APRM Subsystem averages the readings of the 
assigned LPRM detectors and provides measure- 
ment of reactor core power. Individual LPRM sig- 
nals are also transmitted through dedicated interface 
units to various systems such as the RCIS, and the 
plant process computer. 
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An Oscillation Power Range Monitor (OPRM) Subsystems, which monitor neutron flux via in- 
is also part of the APRM. Each OPRM receives iden- core detectors, provide scram logic inputs to the 
tical LPRM signals from the corresponding APRM RPS to initiate a scram in time to prevent exces- 
as inputs, and forms many OPRM cells to monitor sive fuel clad damage as a result of overpower 
the neutron flux behavior of all regions of the core. transients. The APRM Subsystem also generates 
The LPRM signals assigned to each cell are summed a simulated thermal power signal. Both upscale 
and averaged to provide an OPRM signal for this neutron flux and upscale simulated thermal power 
cell. The OPRM trip protection algorithm detects are conditions which provide scram logic signals. 
thermal hydraulic instability and provides trip output A block diagram of a typical NMS division is 
to the RPS if the trip setpoint is exceeded. shown in Figure 6-10. 


Automatic Traversing In-Core Probe (ATIP) 
Subsystem 

This is a single non-safety processor system 
included in the NMS used to provide steady state 
local power information for LPRM calibration and 
three dimensional reactor power determination. 
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The ATIP controller contains the purge control 
system, flux amplifiers and automatic/manual TIP 
sequencing controls for the three TIP machines lo- 
cated in the Reactor Building. The ATIP Subsystem 
performs an axial scan of the neutron flux in the core 
at the LPRM assembly locations. The subsystem can 
be controlled manually by the operator, or it can be 
under micro-processor-based automated control. 
The ATIP Subsystem typically consists of neutron- 
sensitive ion chambers, flexible drive cables, guide 
tubes, indexing machines, drive machines, and an 
automatic control system. 
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block setpoint, and, if the averaged values exceed 
this setpoint, the MRBM Subsystem issues a control 
rod block demand to the RCIS. The rod block set- 
point is a core flow biased variable setpoint. 
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Figure 6-10. Basic Configuration of a Typical Neutron 
Monitoring System Division 
Those portions of the Neutron Monitoring 
System that input signals to the RPS qualify as a 
nuclear safety system. The SRNM and the APRM 
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Overview 


The ABWR instrumentation and control (I&C) 
design features system redundancy, fault tolerant 
operation, and self-diagnostics while the system is 
in operation. This is made possible by the extensive 
use of advanced digital technologies. The ABWR 
I&C system represents the largest system change 
from previous BWR designs. 


Previous BWRs used hard wired point-to-point 
control room to field monitoring and control sys- 
tems; essentially there was one wire per function or 
~30-50,000 wires coming from the field to the cable 
spreading room and then control room. The ABWR 
instead is designed with a three-layer I&C system 
that uses extensive multiplexing and fiber optics. 
The three layers are: 

e Remote Multiplexer Units (RMUs) in the field. 
This equipment generally handles 300-400 sig- 
nals per RMU and interfaces the I&C system 
with the normal field signals and actuators. 


e Acomputer/controller layer. This layer has all 
of the dual and triple redundant controllers that 
operate the plant and a networked computer 
system - there is no single process computer. 


e Adisplay, control and alarm/annunciator layer. 
This layer is basically all the screens, peripherals 
and alarms in the control room and forms the 
I&C interface to the operator. 


The instrumentation of the ABWR is generally 
associated with the control of the reactor, control of 
the balance of plant (BOP), an extensive alarm sys- 
tem, prevention of the operation of the plant under 
unsafe and potentially unsafe conditions, monitoring 
of process fluids and gases, and monitoring of the 


performance of the plant. 


Design goals of the I&C system include: 

e Minimize reactor trips/system unavailability 
due to human errors or single active component 
failures. 


e Design any systems necessary for power genera- 
tion (except the electrical system) to be single- 
failure proof for both control and trips. 


e Achieve a one-in-fifty-year or less failure rate 
for I&C. 


e Computerize operator aids and normal/emer- 
gency procedures to reduce “manual” data 
processing and centralize human engineered op- 
erator interface to minimize operator burden. 


e Provide for most I&C equipment communica- 
tion and display protocols to follow internation- 
ally recognized standards. 


e Use standardized modular equipment and ex- 
tensive self-diagnostics/fault identification to 
minimize operation and maintenance costs and 
reduce the burden on the maintenance staff. 


e Achieve a high degree of plant automation. 


e Provide automatic load-following capability 
over the 50-100% power range. 


Digital Measurement and Control 

A standardized set of microprocessor-based in- 
strument modules is used to implement most ABWR 
monitoring and control functions. The standardized 
Digital Measurement Controllers DMC) and Re- 
mote Multiplexer Units (RMU) exploit the many 
advantages of digital technology, including self-test, 
automatic calibration, user interactive front panels, 
standardization of the man-machine interface and, 
where possible, use of common circuit cards. These 
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features reduce calibration, adjustment, diagnostic 
and repair time and reduce spare circuit card inven- 
tory requirements, as well as reduce control room 
instrument volume. As a result, system availability is 
improved due to the enhanced reliability and reduced 
mean time to repair. 


The DMC chassis, RMU chassis and Man-Ma- 
chine Interface (MMI) chassis are standard for all 
similar ABWR applications; only modular, plug-in 
interchangeable, circuit boards differ between sys- 
tems. Various functional features provided in the 
I&C design include: 

e Sensor signal processing. 


e Redundant sensor power supplies to meet the 
requirements of all sensors. 


e Functional microcomputers implementing data 
transfers, self-test functions and communica- 
tions. 


e High speed parallel data bus for communica- 
tion between the functional microcomputer and 
other modules. 


¢ Trip and analog outputs driving external relays, 
actuators, logic circuits, meters, and recorders. 


e Redundant power supplies for the electronics. 


e Fiber optic and other interfaces, allowing the 
DMC and MMI units to communicate directly 
with plant multiplexing networks. 


e Menu-driven front panel for operator/technician 
interface. 


Multiplexing 

The Multiplexing System provides redundant 
and distributed control and instrumentation data 
communications networks to support the monitoring 
and control of interfacing plant systems. The system 
contains an Essential Multiplexing System (EMS) 
and a Non-Essential Multiplexing System (NEMS) 
for safety and non-safety/BOP systems, respectively. 
The system provides all electrical devices and cir- 
cuitry (such as multiplexing units, bus controllers, 
formatters and data buses) between sensors, display 
devices, controllers and actuators which are defined 
and provided by other plant systems. The multi- 
plexing system also includes the associated data 
acquisition and communication software required to 
support its function of plant-wide data and control 
distribution. As shown on Figure 7-1, digital technol- 


ogy and multiplexed fiber optic signal transmission 
technology have been combined in the ABWR 
design to integrate control and data acquisition for 
both the Reactor and Turbine Buildings. 


Signals from various plant process sensors pro- 
vide input to RMUs located near the sensors. The 
RMUs digitize input signals and multiplex the sig- 
nals via fiber optic cables to the control room. There 
the signals are sent to the various computers, con- 
trollers and display devices as needed. The process 
is bidirectional in that signals from the operator or 
plant controllers are put on the network and directed 
to the various actuators for control action. 


The EMS has four control data networks (each 
of which is redundant), one per division with the 
NEMS being a control data network with dual re- 
dundancy. Whether EMS or NEMS, redundancy is 
such that a single cable can be lost or any RMU fail 
without affecting the operation of the remainder of 
the system. 


Finally, each RMU is itself single-failure proof 
down to a small number of signals; all single failures 
are self-diagnosed. The RMUs are located through- 
out the plant in 1E and non-1E areas to keep plant 
wiring as short as possible. 


Digital Protection Sys- 
tem Applications 


Advanced Safety Systems Design 

The Reactor Protection System (RPS), Neutron 
Monitoring System (NMS) and Leak Detection 
and Isolation System (LDI) are four-channel, while 
the ECCS is three-mechanical divisions actuated 
by two-out-of-four logic from four-channel sensor 
input. NMS is described in Chapter 6. 


Safety System Logic and Control 

Safety System Logic and Control (SSLC) and 
the associated EMS equipment are divided into four 
divisions. Each division is physically and electrically 
separated from the other divisions. Communica- 
tions between divisions, as with communications 


with the NEMS, process computer, and control 
room instruments, is via fiber optic cable which 
provides complete electrical isolation and prevents 
spreading of electrical faults between safety system 
divisions and between safety and non-safety-related 
equipment. Communication between safety divi- 
sions and nonessential equipment is through “Data 
Gateways” which allow information to flow in only 
one direction. 


Some control signals bypass the EMS when the 
signal design requirements are such that process- 
ing the signal through the EMS would cause the 
established design requirements (signal processing 
speed) to be exceeded. 


The SSLC also controls the automatic actua- 
tion and operation of the following systems during 
emergency operation: 
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e High Pressure Core Flooder 

e Reactor Core Isolation Cooling 

e Residual Heat Removal 

e Automatic Depressurization System 
e Emergency Diesel Generators 


e Reactor Building Service Water/Ultimate 
Heat Sink 


e Reactor Building Cooling Water 


Standby Liquid Control (SLCS) and Standby 
Gas Treatment System (SGTS) logic are separate 
from SSLC. 


Reactor Protection System 

The Reactor Protection System (RPS) is the 
overall complex of instrument channels, trip logic, 
trip actuators and scram logic circuitry that initiate 
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Figure 7-1. ABWR Integrated Multiplexing System Architecture 
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rapid insertion of control rods (scram) to shut down 
the reactor if monitored system variables exceed pre- 
established limits. This action avoids fuel damage, 
limits system pressure and thus restricts the release 
of radioactive material. The RPS also establishes 
reactor operating modes and provides status and 
control signals to other systems and annunciators. To 
accomplish its overall function, the RPS interfaces 
with the Essential Multiplexing System, Neutron 
Monitoring System, Process Radiation Monitoring 
System, Control Rod Drive System, Rod Control and 
Information System, Reactor Recirculation Control 
System, Process Computer System, Leak Detection 
and Isolation System, Nuclear Boiler System and 
associated plant systems and equipment. 


The RPS overrides all operator actions and 
process controls and is based on a fail-safe design 
philosophy that allows appropriate protective action 
by providing reliable single-failure-proof capability 
to automatically or manually initiate a reactor scram 
while maintaining protection against unnecessary 
scrams resulting from single failures. This is ac- 
complished through the combination of fail-safe 
equipment design and redundant two-out-of-four 
logic arrangement that automatically reconfigures 
to a two-out-of-three logic if a channel fails or is 
bypassed. Manual RPS actions (scrams) are hard 
wired and always available to the operator. 


Leak Detection and Isolation System 

The Leak Detection and Isolation System (LDI) 
is a four-channel system that consists of temperature, 
pressure, flow and fission-product sensors with as- 
sociated instrumentation, alarm, and isolation func- 
tions. This system detects and annunciates leakage 
and provides signals to close containment isolation 
valves, as required, in the following systems: 


e Main Steamlines 

e Reactor Water Cleanup System 

e Residual Heat Removal System 

e Reactor Core Isolation Cooling System 
e Feedwater System 

e Emergency Core Cooling Systems 


e Other miscellaneous systems 


Small leaks are generally detected by monitor- 


ing the air cooler condensate flow, radiation levels, 
equipment space temperature, and drain sump fill-up 
and pump-out rates. Large leaks are also detected by 
changes in reactor water level, drywell pressure, and 
changes in flow rates in process lines. 


Manual isolation control switches are provided 
to permit the operator to manually initiate (at the 
system level) isolation from the control room. In 
addition, each MSIV is provided with a separate 
manual control switch in the control room which 
is independent of the automatic and manual leak 
detection isolation logic. 


Fault-Tolerant Process 
Control Systems 


The entire ABWR control system necessary for 
power generation is made up of a network of triple 
redundant and dual redundant Fault Tolerant Digital 
Controllers (FTDCs). Single controllers are used 
where the function is not important to power genera- 
tion. In general, the key ABWR boiler control sys- 
tems such as the feedwater control, recirculation flow 
control, turbine control, automatic power regulator 
and reactor pressure regulator systems are based on 
the triplicated, microprocessor-based FTDC. The 
remaining important BOP control systems are based 
on dual redundant FTDCs. Each FTDC includes two 
or three identical processing channels, which receive 
all the redundant process sensors inputs and perform 
the system control calculations in parallel. 


For triple redundant process control, all FTDCs 
are active simultaneously and each provides an 
output to the NEMS network to the RMUs where 
the outputs are two-out-of-three voted (mid-value 
voting on continuous output signals (e.g., valve 
position demand) and two-out-of-three voting on 
discrete outputs (e.g., pump trip). Thus, the FTDC 
design eliminates plant trips due to single failures 
of control system components. 


For dual redundant process control, one FTDC 
is active and the other is in “hot standby”; only one 
processor at a time provides an output to the NEMS 


network and to the RMUs but the other FTDC is 
“live” and can automatically and bumplessly assume 
command if the primary FTDC fails. 


All important control signals are typically 
measured with three independent transducers (and 
occasionally measured with two); these input sig- 
nals are delivered to all controllers by the NEMS 
and validated before control action is taken. This 
scheme and the controller redundancy eliminates 
plant trips due to single failures of control system 
components. 


The FTDC hardware for all two or three process 
control systems is identical. Only the imbedded 
application firmware and the quantity and types 
of input and output modules deviate between the 
systems. The FTDC architecture includes: 


e Twoor three identical processing channels, each 
of which contains the hardware and firmware 
necessary to control the system. 


¢ Dual multiplexing interface units per controller 
for communication to the redundant Non-Es- 
sential Multiplexing System. 


e Interprocessor communication links between 
processing channels to exchange data in order 
to prevent divergence of outputs and to monitor 
processor failures. 


e Redundant power supplies. 


e Signal processing techniques applied to validate 
the redundant input signals for use in control 
computations. 


e A portable Technician Interface Unit (TIU) to 
provide a menu-driven system which allows the 
technician to inject test signals, perform trouble- 
shooting and calibrate process parameters. 


The fault-tolerant architecture of the FTDC 
design provides assurance that no single active 
component failure within the sensing, control, or 
communication equipment can result in loss of 
system function or plant power generation. The dual 
and triplicated design also provides on-line repair 
capability to allow repair and/or replacement of a 
faulty component without disrupting any important 
plant process. 
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Automatic Power Regulator System 

The primary objective of the Automatic Power 
Regulator System (APR) is to control reactor power 
during normal power generation by appropriate 
commands to change rod positions, or the change 
reactor recirculation flow. Either thermal power or 
gross generator electrical power can be controlled/ 
demanded by the operator. Alternatively, the opera- 
tor can engage a pre-programmed daily load-fol- 
lowing schedule. The APR System always follows 
a predefined “trajectory” on the power/flow map for 
any mode of power operation. 


The APR System also has the ability to pull the 
reactor critical and heat it to rated temperature and 
pressure from either a cold or hot standby condition. 
The APR System can also bring the reactor down 
to cold shutdown conditions. For either heatups or 
cooldowns, the reactor temperature rate is controlled 
to within Tech Spec limits by the APR commands 
to the Steam Bypass and Pressure Control System 
(SBPC) and RCIS. 


The APR System consists of triply redundant 
process controllers; these receive information from 
the various plant sensors and issue commands to the 
RCIS to position control rods, to the RFC System 
to change reactor coolant recirculation flow, to the 
SBPC System to set pressure. 


The APR System generally controls the nuclear 
control systems and works in parallel (but not syn- 
chronously) with the Power Generation Control 
System function of the plant Process Computer 
System; the latter system controls most other auto- 
mation functions. The normal mode of operation of 
the APR System is automatic but if any abnormal 
plant condition is detected or if the downstream 
controllers receiving the APR commands fail or 
are switched to manual, the APR will automatically 
cease control operations, switch all downstream 
controllers to manual, and alarms will be activated 
to alert the operator. A failure of the APR System 
will not prevent manual controls of reactor power, 
nor will it prevent safe shutdown of the reactor. 


Feedwater Control System 

The Feedwater Control System (FWC) auto- 
matically controls the flow of feedwater into the 
reactor pressure vessel to maintain the water within 
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the vessel at normal and predetermined levels for 
all modes of reactor operation, including heatup and 
shutdown. The operator can control reactor level 
between the requirements of the steam separators 
(this includes limiting carryover, which affects 
turbine performance, and carryunder, which affects 
RIP operation). 


A fault-tolerant triplicated digital controller, 
using a conventional three-element control scheme, 
provides control signals to adjustable speed drives 
(ASDs) for the feedwater pump motors, to accom- 
plish the control function. 


The FWC System may operate in either single- 
or three-element control modes. At feedwater and 
steam flow rates below 25% of rated when the 
steam flow measurement is outside of the required 
accuracy or below scale, the FWC System utilizes 
only water level measurement in the single-element 
control mode. 


When steam flow is negligible, as during hea- 
tup and cooldown, the FWC System automatically 
controls both the Reactor Water Cleanup (RWCU) 
System dump valve and the feedwater low flow 
control valve to control reactor level in the single 
element mode in order to counter the effects of 
density changes during heatup and purge flows into 
the reactor. At higher flow rates, the FWC System 
in three-element control mode uses water level, 
main steamline flow, main feedwater line flow, and 
feedpump suction flow measurements for water 
level control. 


Steam Bypass and Pressure Control System 

The Steam Bypass and Pressure Control System 
(SBPC) is a triply redundant process control system: 
in Manual, the operator can adjust bypass valve posi- 
tion and provide reactor pressure setpoint demands; 
in Automatic, these functions are provided by the 
APR. Only the operator can switch the SBPC System 
to Automatic but either the operator or the APR can 
switch the SBPC System to Manual. 


Unlike previous BWRs, reactor pressure and 
not turbine inlet pressure is controlled by the SBPC 
System. In normal power generation, reactor pres- 
sure is controlled by automatically positioning the 
turbine control valves - the pressure control signal 


“passes through” the SBPC System to the turbine 
control system. During modes of operation where 
the turbine is off-line, flow limited, tripped or un- 
der control of its speed/acceleration control system 
during turbine roll or coastdown, reactor pressure is 
controlled by the bypass valves which pass steam 
directly to the main condenser under the control of 
the pressure regulator. Steam is also automatically 
bypassed to the condenser whenever the reactor 
steaming rate exceeds the flow permitted to pass 
to the turbine generator. With a full bypass design 
option, the turbine bypass system has the capability 
to shed up to 100% of the turbine-generator rated 
load without reactor trip or operation of SRVs. For 
all these modes of operation, the pressure regula- 
tion system provides main turbine control valve 
and bypass valve flow demands so as to maintain 
a nearly constant reactor pressure; it also indirectly 
(through the APR) provides demands to the recir- 
culation system to optionally aid in maintenance of 
grid frequency. 


Recirculation Flow Control System 

The Recirculation Flow Control (RFC) System 
is a triply redundant process control system: in 
Manual, the operator can adjust individual or gang 
RIP speeds or demand a specific core flow; in Au- 
tomatic, these functions are provided by the APR. 
Only the operator can switch the RFC System to 
Automatic but either the operator or the APR can 
switch the RFC System to Manual. 


The RFC System consists of three redundant 
process controllers, adjustable speed drives (ASDs), 
switches, sensors, and alarm devices provided for 
operational manipulation of the ten RIPs and the 
surveillance of associated equipment. The solid-state 
ASDs provide variable voltage, variable frequency 
electrical power to the RIP induction motors. In 
response to either the plant operator or the APR or, 
optionally, grid frequency demands, the RFC Sys- 
tem adjusts the ASD power supply output to vary 
RIP speed, core flow and reactor power. Extremely 
rapid reactor power changes can be achieved either 
by manual operation or by automatic operation from 
~65-100% reactor power. 


The objective of the RFC System is to control 
reactor power level, over a limited range, by con- 
trolling the flow rate of the coolant flow through 


the reactor. To change the coolant flow rate through 
the core, the speed of the RIPs are adjusted, either 
together in the gang mode or individually by com- 
mands from the RFC System to the ASDs control- 
lers of the individual RIPs. The RIPs can be driven 
to operate anywhere between 30 to 100% of rated 
speed with the variable voltage, variable frequency 
power source supplied by the ASDs. Due to the low 
rotating inertia of the RIPs, which are coupled with 
the solid-state ASDs, the RIP can respond quickly 
to load transients and operator demands. 


Turbine Control System 

The Turbine Control System is a redundant 
process control system: in Manual, the operator 
can adjust the turbine load set; in Automatic, this 
function is provided by the APR. Only the operator 
can switch the turbine controller to Automatic but 
either the operator or the APR can switch the turbine 
controller to Manual. 


The turbine generator uses a digital monitoring 
and control system which, in coordination with the 
turbine SBPC System, controls the turbine speed, 
load, and flow for startup and normal operations. 
The control system operates the turbine stop valves, 
control valves, and combined intermediate valves. 
The turbine control system also provides automa- 
tion functions like sequencing the appropriate tur- 
bine support systems and controlling turbine roll, 
synchronization of the main generator and initial 
loading. 


Non-redundant turbine-generator supervisory 
instrumentation is provided for operational analysis 
and malfunction diagnosis. Automatic control func- 
tions are programmed to protect the turbine-genera- 
tor from overspeed and to trip it; the trip logic for 
all but bearing vibration is at least two-out-of-three 
logic. 


Other Control Functions 

The following control functions are dual redun- 
dant. The software functions are deliberately spread 
through many controllers to facilitate verification 
and validation (V&V), quality assurance and initial 
construction setup. 


Power Generation Control System 
The Power Generation Control System (PGCS) 


Chapter 7 — Instrumentation and Control 


is a subset of the process computer function imple- 
mented as a dual redundant controller. The APR 
System provides automation of the reactor control 
functions and the PGCS provides other nuclear is- 
land and BOP automation functions by providing the 
setpoints of lower level controllers and commands 
to various BOP equipment for normal plant startup, 
shutdown, and power range operations. 


The PGCS works in parallel but is not synchro- 
nous with the APR System; one of the design features 
of the PGCS is that it contains no control algorithms 
but instead issues only supervisorial commands to 
the BOP controllers and systems which otherwise 
remain responsible for their own availability and 
operation. PGCS contains the algorithms for the 
automated control sequences associated with plant 
startup, shutdown, and power range operations. 


The plant operator interfaces with the PGCS 
through a series of breakpoint controls to initiate 
automated sequences from the operator control 
console. In general, plant automation is broken 
down into logical steps and sequences like heatup 
or turbine roll which the operator can initiate and 
which then proceed to completion and halt until the 
operator initiates the next sequence. For selected op- 
erations that are not automated or that are contained 
within 1E systems, the system prompts the operator 
to perform such operations. A semiautomatic mode is 
also provided where the PGCS provides only guid- 
ance messages to the operator but does not actually 
operate plant equipment. 


Rod Control and Information System 

The Rod Control and Information System 
(RCIS) is a dual redundant process control system: 
in Manual, the operator can select and position the 
control rods manually, either one at a time or in a 
gang mode. If the RCIS is in Semi-Automatic mode, 
the operator needs to only give permission to start 
and stop control rod motion and the RCIS will insert 
or withdraw the control rods following a predefined 
control rod sequence. If the RCIS is in Automatic 
mode, it responds to commands for rod insertion or 
withdrawal from the APR; this will also follow a 
predefined control rod sequence. Only the operator 
can switch the RCIS controllers to Automatic, but 
either the operator or the APR can switch the RCIS 
to Manual. 
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The RCIS provides the means by which con- 
trol rods are positioned from the control room for 
power control. The RCIS controls changes in the 
core reactivity, power, and power shape via the 
FMCRD mechanisms which move the neutron 
absorbing control rods within the core. For normal 
power generation, the control rods are moved by 
their electric motors in relatively fine steps; for 
reactor scrams, the control rods are inserted both 
hydraulically and electrically. For operation in the 
normal gang movement mode, one gang of control 
rods can be manipulated at a time. The system in- 
cludes the logic that restricts control rod movement 
(rod block) under certain conditions as a backup to 
procedural controls. 


The RCIS contains as a subsystem, the ATLM 
(automatic thermal limit monitor), which provides 
an on-line measurement of plant thermal limits from 
the LPRMs and periodic process computer updates. 
The ATLM will automatically block rod motion if it 
detects operation near Tech Spec thermal limits. 


Another RCIS subsystem is the Rod Worth 
Minimizer (RWM) Subsystem, which forces com- 
pliance to the defined control rod sequencing rules 
by independently issuing rod blocks should a high 
worth rod pattern develop. 


The RCIS and the scram timing panel also sup- 
port automatic measurement of control rod Tech 
Spec scram speeds for either planned or unplanned 
scrams. 


Process Radiation Monitoring System 

The Process Radiation Monitoring System 
(PRM) monitors and controls radioactivity in pro- 
cess and effluent streams and activates appropriate 
alarms, isolations, and controls. The PRM System 
indicates and records radiation levels associated with 
selected plant liquid and gaseous process streams 
and effluent paths leading to the environment. All 
effluents from the plant, which are potentially radio- 
active, are monitored both locally and in the control 
room. These include the following: 


e Main steamline tunnel area 


e Reactor Building ventilation exhaust (including 


fuel handling area) 
e Control Building air intake supply 
e Drywell sumps liquid discharge 
e Radwaste liquid discharge 
e Offgas discharge (pretreated and post-treated) 
e Gland steam condenser offgas discharge 
e Plant stack discharge 
e Turbine Building vent exhaust 


e Radwaste Building ventilation exhaust. 


Area Radiation Monitoring System 

The Area Radiation Monitoring (ARM) System 
provides operating personnel with a record and indi- 
cation, in the main control room, of gamma radiation 
levels at selected locations within the various plant 
buildings and gives warning of excessive gamma 
radiation levels in areas where nuclear fuel is stored 
or handled. 


The ARM System consists of gamma-sensi- 
tive detectors, digital radiation monitors, auxiliary 
units, and local audible warning devices. System 
recording, like all process functions, is done by the 
process computer. The detector signals are digitized 
and multiplexed for transmission to the radiation 
monitors and to the main control room. Each local 
monitor has two adjustable trip circuits for alarm 
initiation. Auxiliary units are provided in local areas 
for radiation indication and for initiating the sonic 
alarms on abnormal levels. Radiation detectors are 
located in various areas of the plant to provide early 
detection and warning for personnel protection. 


Containment Atmospheric Monitoring System 

The Containment Atmospheric Monitoring 
(CAM) System measures alarms and records radia- 
tion levels and the hydrogen and oxygen concentra- 
tion in the primary containment under post-accident 
conditions. It is automatically put in service upon 
detection of LOCA conditions. 


The CAM System provides normal plant shut- 
down and post-accident monitoring for gross gamma 
radiation and hydrogen/oxygen concentration levels 
in both drywell and suppression chamber. The CAM 
System consists of two divisions which are redun- 
dantly designed so that failure of any single element 


will not interfere with the system operation. Electri- 
cal separation is maintained between the redundant 
divisions. All components used for safety-related 
functions are qualified for the environment in which 
they are located. The system can be actuated manu- 
ally by the operator, or automatically initiated by a 
LOCA signal (high drywell pressure or low reactor 
water level). The CAM System does not actuate nor 
interface with any other safety-related systems. 


Process Computer 

On-line networked computers are provided to 
monitor and log process variables and make certain 
analytical computations. The process computer cabi- 
nets are really several redundant computer functions 
that may, in fact, be several physical computers. 
These functions include: 


e Most non-lE display support 


e Core three-dimensional power monitoring (3D 
Monicore) 


e Balance-of-plant (BOP) performance calcula- 
tions 


e Sequence of events 


e Manual and automatic logging 


Remote Shutdown System 

In the event that the control room becomes in- 
accessible, the reactor can be brought from power 
range operation to cold shutdown conditions by 
use of controls and equipment that are available 
outside the control room. Manual transfer devices 
are provided which override control outputs from the 
main control room and transfer controls to remote 
shutdown control. Control signals (but not process 
signals, since they interface with field RMUs and 
not the control room) are interrupted by the transfer 
switches. All necessary power supply circuits are 
also transferred to other sources. Operation of the 
transfer switches causes an alarm in the main control 
room; outside the main control room, access to the 
remote shutdown control panels is administratively 
and procedurally controlled. The Remote Shutdown 
System (RSS) functions ahead of the plant multi- 
plexing system: all controls and indications are hard 
wired and will function regardless of the status of 
the multiplexing system. 


Instrumentation and controls on the remote 
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shutdown panels include the following: 


e Controls and indications for operation of one 
HPCF loop to control reactor water level. 


e Controls and indications for operation of two 
RHR loops to support shutdown cooling once 
reactor pressure has been reduced, and sup- 
pression pool cooling to control suppression 
pool temperature which may rise due to SRV 
operation. 


e Controls to operate three SRVs for maintaining 
and reducing reactor pressure. 


e Indications of reactor vessel water level and 
pressure, and suppression pool temperature 
and level. 


e Controls and indications for operation of the 
RCW and RSW Systems. 


e Controls and indications for electrical power 
distribution. 


e Controls for manually starting and stopping two 
of the emergency diesel generators. 


Main Control Room 


The key elements of the ABWR main control 
room (MCR) design (Figure 7-2) are (1) the compact 
main control console (MCC) for primary opera- 
tor control and monitoring functions, and (2) the 
integrated wide display panel, which presents an 
overview of the plant status that is clearly visible to 
the entire operating crew. Each of the units incorpo- 
rates advanced man-machine interface technologies 
to achieve enhanced operability and improved reli- 
ability. Human factors engineering principles have 
been incorporated into the design of the MCR panels 
and into the overall MCR arrangement. 


Total plant control is achieved from the main 
control console for all phases of operation. The 
console design incorporates touch-screen cathode 
ray tubes (CRTs), flat panel display devices, and 
a limited number of hard switches as the primary 
operator interface devices. The CRTs and flat panel 
displays are driven by the Plant Computer System 
(PCS). The main control console has a low profile 
so that the operators can perform their duties from 
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a seated position. 

The Wide Display Panel provides summary in- 
formation on plant status parameters and key alarms 
to the operators, supervisors and other technical sup- 
port personnel in the MCR. The Wide Display Panel 
is located immediately in front of the operators when 
they are at their normal work station seated at the 
main control console. This Wide Display Panel in- 
cludes a fixed mimic display, an approximately 100- 
inch large variable display, top-level plant alarms, 
detailed system level alarms, and touch-control flat 
panel displays. The Wide Display Panel incorporates 
the Safety Parameter Display System (SPDS) as part 
of the plant status summary information. 


The MCR also includes a supervisors’ console 
which has CRTs for monitoring of plant status. The 
supervisors’ console is set back directly behind the 
operators in a position which ensures that a clear 
view of all operating activities is available to the 
supervisors. 


Figure 7-2. ABWR (Lungmen) Main Control Room 


Main Control Console 

The main control console (MCC) provides 
the displays and controls necessary to maintain 
and operate the plant during normal, abnormal, 
and emergency conditions. This console is used in 
conjunction with the information provided on the 
vertical surface of the Wide Display Panel. 


The MCC comprises the work stations for the 
two control room plant operators, and is configured 
such that the operators are provided with controls 
and monitoring information necessary to perform 
assigned tasks and allows the operators to view all 
of the Wide Display Panel from their seated position 
at the MCC. The console is configured in a truncated 
“V” shape. The normal plant control and monitor- 
ing functions are performed in the central area of 
the console, while the safety-related Nuclear Steam 
Supply (NSS) functions are located on the left-hand 
side and the balance-of-plant (BOP) functions are 
located on the right-hand side. 


Aprimary means for operator control and moni- 
toring is provided by the color-graphic, touch-screen 
CRTs mounted on the MCC. The CRT displays are 
driven by the Process Computer. There are many 
types of display formats which can be shown on 
the CRTs, including summary plant status displays, 
trend plots, system status formats, alarm summaries, 
plant operating procedure guidance displays, and 
plant automation guidance displays. Although each 
CRT is assigned a default display for a given oper- 
ating condition, the operators have the flexibility to 
select any display on each of the seven touch-screen 
CRTs. This multi-redundant display capability en- 
sures continued normal plant operation in the event 
of a failure of one or more of the CRTs. 


The system status displays provide information 
on individual plant systems. The touch screens on the 
CRTs provide direct control for non safety-related 
systems at the system component level. The ap- 
plication of this touch screen capability for control 
of non safety systems, along with the incorporation 
of automated plant operation features, was a major 
factor in reducing the size of the MCC to its present 
compact dimensions. 


The alarm summary displays on the MCC CRTs 
support the operators’ decision-making process. 
The presentation of alarms employs optimization 
techniques designed to prioritize alarms and filter or 
suppress nuisance alarms which require no specific 
operator action. An example of this alarm processing 
would be the suppression of the audible alarms as- 
sociated with the Reactor Protection System during 
the period of a reactor scram. 


The ABWR MCC also provides flat panel dis- 
plays (e.g., electroluminescent, plasma, or liquid 
crystal displays) for extended monitoring and control 
capability. These touch-control flat panel displays are 
driven by microprocessor-based controllers which 
are completely diverse from the controllers. This 
diversity of displays and controls in the console 
design enables continued plant operation even in the 
unlikely event of a total loss of all CRTs. 


The flat panel display devices are used to sup- 
port both safety and non safety system monitoring 
and control functions. The flat panel displays which 
are used as safety-system interfaces are fully quali- 
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fied to Class 1E standards. The safety-related flat 
displays are located on the left side of the MCC. 
For control and monitoring of the three redundant 
and independent divisions of the Emergency Core 
Cooling System (ECCS) and reactor primary con- 
tainment heat removal, two flat panel display devices 
are provided in each of those divisions. One flat 
panel display is typically used for monitoring and 
the other is used for control. Flat panel displays for 
monitoring and control of major non safety systems 
are also located on the MCC. 


In addition to the touch-screen CRTs and flat 
panel display devices described above, the MCC is 
equipped with dedicated, “hard” switches located on 
the horizontal desk surfaces of the console. Some of 
these hard switches are the sequence master control 
push-button switches used for initiating automation 
sequences for normal plant operations and for chang- 
ing system operating modes. Other hard switches are 
hard-wired directly to the actuated equipment (for 
absolute assurance of function) and provide backup 
capability for initiating safety system functions and 
key plant protection features, such as manual scram, 
SLCS initiation and turbine trip functions. 

A limited number of dedicated operator inter- 
faces are provided in the center of the MCC for key 
systems such as the Rod Control and Information 
System. These dedicated interfaces contain hard 
switches and indicators to provide quick and con- 
venient access to key system interfaces under all 
plant conditions. 


Wide Display Panel 

The Wide Display Panel (WDP) is a large ver- 
tical board which provides information on overall 
plant status with real-time data during all phases 
of plant operation. The information presented on 
the wide display panel is clearly visible from the 
main control console, the supervisors’ console, and 
other positions in the control room where support 
personnel may be stationed. The Wide Display Panel 
provides a fixed mimic display, a large (~100-inch 
diagonal) variable display. Spatially dedicated 
alarm windows for critical, plant-level alarms are 
also provided on the left-hand side Wide Display 
Panel. Spatially-dedicated detailed system level 
alarms are located above their respective systems 
on the fixed-mimic display. At the base of the Wide 
Display Panel, there are multiple flat display devices 
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for individual system surveillance, monitoring and 
control. 


The fixed mimic display is arranged on two, 
adjacent, upright panels which comprise the center 
and right-hand sections of the Wide Display Panel. 
The two panels are driven by independent micro- 
processor-based controllers. The center panel is 
seismically qualified and is driven by safety-related, 
Class 1E microprocessors. Information on this panel 
includes the critical plant parameters required for a 
safety parameter display system and Type A post-ac- 
cident monitoring indications. Specific information 
displayed on this panel includes the status of the core 
cooling systems, reactor pressure vessel and core pa- 
rameters, containment and radiation parameters, and 
the status of safety-related equipment. The informa- 
tion displayed completely satisfies the requirement 
for safety parameter and post-accident monitoring 
without the need for any other display equipment. 
The right panel of the fixed mimic display contains 
information on the BOP power generation cycle, 
such as the condensate and feedwater system, tur- 
bine/generator, and power transmission systems. 


Also, within the area of the fixed mimic display, 
dedicated alarm windows are provided for impor- 
tant, plant-level alarms that affect plant availability 
or safety. Examples of the plant-level alarms include 
high reactor pressure, low reactor water level and 
high suppression pool temperature. 


The large variable display is located on the right 
upright panel of the Wide Display Panel. The basic 
purpose of the large variable display is to provide 
information on important plant process parameters 
which supplements the overview information on the 
fixed mimic display. The information presented on 
the large variable display can be changed, depending 
on the plant operating conditions and the needs of 
the operating crew. Any display format available on 
the MCC CRTs can also be displayed on the large 
variable display. Examples of the full color graphic 
displays that can be shown on the variable display 
are the various CRT display formats which would be 
selected under plant emergency conditions. 


Closed circuit TVs are provided which allow 
remote observation of equipment and operations 
in areas that are not normally accessible and of 


other critical activities such as fuel handling and 
maintenance tasks. Communication between the 
control room crew and other areas of the plant is 
enhanced with this visual feedback capability. These 
closed circuit TVs have high definition with color 
capability. 


The touch-control flat displays located at the 
base of the Wide Display Panel provide the capabil- 
ity for surveillance of systems and equipment during 
normal plant operation. In addition, these devices 
can be used for control and monitoring of plant 
systems during maintenance and refueling outages 
and during periods when a portion of the MCC may 
be taken out of service for maintenance. These flat 
displays are driven by microprocessor-based con- 
trollers which are separate from the plant Process 
Computer System. 


Plant Automation 


The ABWR design incorporates extensive au- 
tomation of the operator actions which are required 
during a normal plant startup, shutdown and power 
range maneuvers. The automation features adopted 
for the ABWR provide for enhanced operability and 
improved capacity factor relative to conventional 
BWR designs. However, the extent of automation 
implemented in the ABWR has been carefully 
selected to ensure that the primary control of plant 
operations remains with the operators. The operators 
remain fully cognizant of the plant status and can 
intervene in the operation at any time, if necessary. 


The ABWR automation design provides for 
three distinct automation modes: Automatic, Semi- 
Automatic, and Manual. In Automatic mode, the 
operator initiates automated sequences of operation 
from the MCC. Periodic breakpoints are inserted 
in the automated sequence which require operator 
verification of plant status and manual actuation of a 
breakpoint control push-button to allow the automat- 
ed sequence to continue. When a change in the status 
of a safety system is required, automatic prompts 
are provided to the operator and the automation is 
suspended until the operator manually completes the 
necessary safety system status change. 


In the Semi-Automatic mode of operation, the 
progression of normal plant operations is monitored 
and automated prompts and guidance are provided 
to the operator; however, all actual control actions 
must be performed manually by the operator. In 
Manual mode of operation, no automated operator 
guidance or prompts are provided. The operator can 
completely stop an automatic operation at any time 
by selecting the Manual mode of operation. 


Operation 


The ABWR control room design provides 
the capability for a single operator to perform all 
required control and monitoring functions during 
normal plant operations as well as under emergency 
plant conditions. One-man operation is possible due 
to implementation of several key design features: 
(1) the Wide Display Panel for overall plant moni- 
toring, (2) plant-level automation, (3) system-level 
automation, (4) the compact MCC design, and (5) 
implementation of operator guidance functions 
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which display appropriate operating sequences on 
the main control panel CRTs. The role of the opera- 
tor will primarily be one of monitoring the status 
of individual systems and the overall plant and 
the progress of automation sequences, rather than 
the traditional role of monitoring and controlling 
individual system equipment. However, to foster a 
team approach in plant operation and to maintain 
operator vigilance, the operating staff organization 
for the reference ABWR control room design is 
based upon having two operators normally stationed 
at the control console. 


During emergency plant operations, plant-level 
automation is automatically suspended, but system 
level automation is available. One operator would 
be responsible for the NSS systems and the other 
for the BOP systems, with the supervisors provid- 
ing direction and guidance. Again, system-level 
automation allows for simplified execution of both 
the safety and non safety system operations. In lieu 
of system-level automation, direct manual control 
of individual system equipment is available on the 
touch-screen CRTs and flat displays. 
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Plant Layout 


The ABWR Plant includes all buildings which 
are dedicated to housing systems and the equipment 
related to the nuclear system or controls access to 
this equipment and systems. There are five buildings 
within the scope: 


e Reactor Building — includes the reactor pressure 
vessel, containment, and major portions of the 
nuclear steam supply system, refueling area, 
diesel generators, essential power, nonessential 
power, emergency core cooling systems, HVAC 
and supporting systems. 


e Service Building — personnel facilities, security 
offices, and health physics station. 


e Control Building — includes the control room, 
the computer facility, Reactor Building compo- 
nent cooling water system and the control room 
HVAC system. 


¢ Turbine Building — houses all equipment as- 
sociated with the main turbine generator. Other 
auxiliary equipment is also located in this build- 
ing. 

e Radwaste Building — houses all equipment as- 
sociated with the collection and processing of 
solid and liquid radioactive waste generated by 
the plant. 


Development of the ABWR plant and build- 
ing arrangements is been guided by the following 
criteria: 


e Retain the passive and well established BWR 
pressure suppression containment technology. 
Use of the horizontal vent configuration was 
confirmed for the Mark II containments. 


e Separate clean and controlled radiation areas to 
minimize personnel exposure during operation 
and maintenance. 


e Emphasize improved layout of systems to 
improve access and equipment maintenance 
activities. 


e Locate major equipment for early installation 
using open top construction approach and large 
scale modularization. 


e Arrange the Reactor Building around the pri- 
mary containment to provide multiple barriers 
to post-accident fission product leakage, and 
high tolerance to external missiles. 


The site plan of the ABWR includes the Reactor, 
Turbine, Control, Radwaste, Service and support- 
ing buildings. Provision is made within the Reactor 
Building for at least ten years spent fuel storage. 
Separate buildings can be provided for additional 
onsite waste storage. Figure 8-1 illustrates the site 
plan of the ABWR for a single unit arrangement. 


The site plan includes consideration for con- 
struction space and site access. The arrangement 
provides a clear access space around the Reactor and 
Turbine Buildings for heavy lift mobile construction 
cranes without interference with other cranes, access 
ways and miscellaneous equipment. The artist’s 
rendering in Figure 8-2 provides a view of a typical 
two-unit site (Lungmen). 


The ABWR design is an enhanced arrange- 
ment to minimize material quantities. This, when 
combined with the volume reduction compared to 
previous designs, contributes to the substantial re- 
duction in both the estimated construction schedule 
and plant capital cost. 
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A three-dimensional perspective of the Reactor, 
Control and Turbine Buildings is shown in Figure 
8-3. 


The layout of the Reactor, Control and Turbine 
Buildings was based on the following considerations 
(for United States standardized design). 


e Personnel access for all normal operating and 
maintenance activities is a primary concern. 
Access routes from the change room to con- 
taminated Reactor and Turbine Building areas 
are as direct as possible and clearly separated 
from clean routes. At each floor, 360° access is 
provided, if practical, to enhance daily inspec- 
tions and normal work activities. Access to 
equipment not reachable from floor level is via 
platform and stair access wherever possible. 


Figure 8-1. ABWR Site Plan 


Equipment access is provided for all surveil- 
lance, maintenance and replacement activities 
with local service areas and laydown space. 
Adequate hallways and other equipment re- 
moval paths, including vertical access hatches, 
are provided for moving equipment from its 
installed position to service areas or out of the 
building for repair. Lifting points, monorails and 
other installed devices are provided to facilitate 
equipment handling and minimize the need for 
re-rigging individual equipment movements. 
Equipment access also considers the need for 
temporary construction access. 


Radiation levels are controlled and minimized. 
The Reactor Building is divided into clean and 
controlled areas. Once personnel enter a clean 
or controlled area, it is not possible to cross- 
over to the other area without returning to the 
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change area. Redundant equipment is located 
in shielded cells to permit servicing one piece 
of equipment while the plant continues to op- 
erate. Valve galleries are provided to minimize 
personnel exposure during system operation or 
preparation for maintenance. 


The turbine generator can be aligned with its 
axis in-line with the Reactor Building. This can 
be done to minimize the possibility of turbine 
missile impact on the containment vessel. 


The main and auxiliary transformers are located 
adjacent to the main generator at the end of the 
Turbine Building. This location minimizes the 
length of the isophase bus duct between the 
generator and transformers, as well as the power 
supply cables back to the main electrical area of 
the power block. 


Figure 8-2. Conceptual picture of Lungmen Site in Taiwan 


Reactor Building 


The Reactor Building houses the containment, 
drywell, and major portions of the nuclear steam 
supply system, steam tunnel, refueling area, diesel 
generators, essential power, nonessential power, 
Emergency Core Cooling Systems, HVAC system, 
and other supporting systems. 


The ABWR Reactor Building is a reinforced 
concrete structure. The integrated Reactor Building 
and containment structure has been analyzed and 
licensed for a safe shutdown earthquake (SSE) of 
0.3g for an “all-soils” site envelope. The Lungmen 
design is for 0.4g SSE. 


Asecondary containment surrounds the primary 
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containment and provides a secondary containment 
function, including a Standby Gas Treatment System 
(SGTS). 


Careful attention has been given to ease of 
construction with this building arrangement. The 
construction scheme embodied assumes that the 
major cooling equipment has been placed on the 
lowest floors of the building to allow early installa- 
tion during construction. 


Modularization techniques are implemented to 
reduce costs and improve construction schedules. 
These techniques are applied to such Reactor Build- 
ing items as (1) building reinforcing bar assemblies, 
(2) structural steel assemblies, (3) steel liners for the 
containment and associated water pools, (4) selected 
equipment assemblies, and (5) drywell platform and 
piping supports. 


Removal of the post-LOCA decay heat is 
achieved by the Containment Heat Removal System, 
consisting of the suppression pool cooling mode, 
wetwell, and drywell spray features. The large 
volume of water in the suppression pool serves as a 
fission product scrubbing and retention mechanism. 
The Reactor Building serves as an additional barrier 
between the primary containment and the environ- 
ment. Any fission product leakage from the primary 
containment is expected to be contained within the 
Reactor Building. 


Analyses of the radiological dose consequences 
for accidents, based on an assumed containment leak 
rate of 0.5% per day, show that the offsite doses after 
an accident is less than 1 rem. This favorable dose 
rate is made possible by trapping fission products 
within the secondary containment with a slight 
negative pressure and processing the air through 
the SGTS. 


Key distinguishing features of the ABWR Reac- 
tor Building design include: 


e Elimination of external recirculation loops 
which reduces the containment volume associ- 
ated with high construction costs. 


e Reduced building volume which reduces mate- 
rial costs and construction schedule. 


e Design with conventional structural shapes to 
improve constructability which reduces capital 
costs and construction schedule. 


e Improved personnel and equipment access for 
enhanced operability and maintainability. 


The volume of the ABWR Reactor Building 
is reduced to approximately 167,000 cubic meters. 
Since this reduced volume was obtained by sim- 
plification of the reactor supporting systems and 
optimization of their arrangement with improved 
access (rather than simply by compaction), it pro- 
vides attractive material cost savings over previous 
BWRs and helps reduce the construction schedule 
without adversely impacting maintenance. 


The major equipment access to the Reactor 
Building is via a double door vestibule at grade level. 
This entry area is connected to the refueling floor 
by a large hatch serviced by the Reactor Building 
crane. The Reactor Building layout utilizes the grade 
level entry area for major servicing of the cooling 
equipment. All of the major pieces of equipment 
can be moved into the reactor building area through 
hatches. 


Figure 8-4 shows an elevation view of the Re- 
actor building. The major features and significant 
equipment are shown in this view. Grade elevation 
is at about the same elevation as the floor slab where 
the Main Steam and Feedwater lines are shown. Ac- 
cess to the lower drywell is by means of the locks 
shown over the suppression pool region. 


Figure 8-5 shows a plan view of the reactor 
building at the refueling floor elevation. Shown 
here is the laydown arrangement of the large parts 
that are removed the RPV and its surrounding ar- 
eas during a maintenance or refueling outage. This 
laydown assumes concrete plugs are used over the 
drywell head in the reactor cavity; even more space 
would be available if water shielding were used in 
the reactor cavity. 


Figure 8-6 shows a plan view at the basemat 
elevation. Four safety division quadrants are seen 
in this figure. On the top right quadrant is Division 
A; Division C is in the lower right quadrant and 
Division B is in the lower left quadrant. The fourth 
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Advanced Boiling Water Reactor 


1. Reactor Pressure Vessel 17. RCIC Steam Turbine and Pump 
2. Reactor Internal Pumps 18. Diesel Generator 
3. Fine Motion Control Rod Drives 19. Standby Gas Treatment Filter 
4. Main Steam Isolation Valves and Fans 
5. Safety/Relief Valves 20. Spent Fuel Storage Pool 
6. SRV Quenchers 21. Refueling Platform 
7. Lower Drywell Equipment Platform 22. Shield Blocks 
8. Horizontal Vents 23. Steam Dryer and Separator 
9. Suppression Pool Storage Pool 
10. Lower Drywell Flooder 24. Bridge Crane 
11. Reinforced Containment 25. Main Steam Lines 
Concrete Vessel 26. Feedwater Lines 
12. Hydraulic Control Units 27. Main Control Room 
13. Control Rod Drive Hydraulic 28. Turbine Generator 
System Pumps 29. Moisture Separator Reheater 
14. RHR Heat Exchanger 30. Combustion Turbine Generator 
15. RHR Pump 31. Air Compressor and Dryers 
16. HPCF Pump 32. Switchyard 


Figure 8-3. ABWR Cutaway View of the Reactor, Control and Turbine Buildings 
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Figure 8-4. ABWR Reactor Building 0-180° Elevation 
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Figure 8-5. ABWR Reactor Building Refueling Floor 
Elevation 


Figure 8-6. ABWR Reactor Building Basemat Elevation 


division is electrical only and is located in the upper 
left quadrant. In the center of the picture is a plan 
view of the drywell and wetwell showing the pres- 
sure suppression vent system and the submerged 
quenchers that channel steam passed though the 
SRVs to the suppression pool 


Primary Containment 
System 


The ABWR pressure suppression primary 
containment system, which comprises the drywell 
(DW), wetwell (WW), and supporting systems, is 
designed to have the following functional capabili- 
ties (see Figure 8-7): 


¢ The containment structure has the capability 
to maintain its functional integrity during and 
following the peak transient pressures and 
temperatures which would occur following any 
postulated loss-of-coolant accident (LOCA). 
The containment structure is designed for the 
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Figure 8-7. ABWR Containment Features 


full range of loading conditions consistent with 
normal plant operating and accident conditions, 
including LOCA related loads in and above 
the suppression pool (SP). The containment 
structure is designed to accommodate the 
negative pressure difference between the 
DW and WW and the Reactor Building. 


e The containment has capability for rapid closure 
or isolation of all pipes and ducts that penetrate 
the containment boundary in order to maintain 
leak tightness within acceptable limits. 


e The containment structure and isolation, with 
concurrent operation of other accident mitiga- 
tion systems, is designed to limit fission product 
leakage during and following the postulated 
DBA to values less than leakage rates that could 
result in offsite radiation doses greater than those 
set forth in 1OCFR100. 


e The containment structure is designed to ac- 
commodate flooding to a sufficient depth above 
the active fuel to permit safe removal of the 
fuel assemblies from the reactor core after the 
postulated DBA. 


e The containment structure design provides 
means to channel the flow from postulated pipe 
ruptures in the DW to the suppression pool. 


Drywell Structure 
The DW is comprised of two volumes: 


e An upper drywell (UD) volume surrounding 
the reactor pressure vessel (RPV) and housing 
the steam and feedwater lines and other con- 
nections of the reactor primary coolant system, 
safety/relief valves (SRVs) and the drywell 
HVAC coolers. 


e A lower drywell (LD) volume housing the 
reactor internal pumps, fine motion control 
rod drives (FMCRDs) and under vessel com- 
ponents and servicing equipment. The UD is a 
cylindrical, reinforced concrete structure with a 
removable steel head and a reinforced concrete 
diaphragm floor. The cylindrical RPV pedestal, 
which is connected rigidly to the diaphragm 
floor, separates the LD from the wetwell. It is a 
prefabricated steel structure filled with concrete 
after erection. Ten drywell connecting vents 
(DCVs) are built into the RPV pedestal and con- 
nect the UD and LD. The DCVs are extended 
downward via steel pipes, each of which has 
three horizontal vent outlets into the suppres- 
sion pool. 


Wetwell Structure 

The WW is comprised of an air volume and a 
suppression pool filled with water to rapidly con- 
dense steam from a reactor vessel blowdown via 
the SRVs or from a break in a major pipe inside 
the drywell through the vent system. The wetwell 
boundary is a cylindrical reinforced concrete wall 
which is continuous with the UD boundary. A rein- 
forced concrete mat foundation supports the entire 
containment system and enclosed structures, systems 
and components, and extends to support the Reactor 
Building surrounding the containment. 


Containment Structure 

The containment structure includes a steel liner 
to reduce fission product leakage. All normally wet- 
ted surfaces of the liner in the suppression pool are 
made of stainless steel. Penetrations through the liner 
for the drywell head, equipment hatches, personnel 
locks, piping, and electrical and instrumentation 
lines are provided with seals and leak tight connec- 
tions. The allowable leakage is 0.5% per day from 
all sources, excluding main steam isolation valve 


(MSIV) leakage. 


Containment System 

The drywell is designed to withstand the pres- 
sure and temperature transients associated with the 
rupture of any primary system pipe inside the dry- 
well and also the rapid reversal in pressure when the 
steam in the drywell is condensed by the Emergency 
Core Cooling System (ECCS) flow following post- 
LOCA flooding of the RPV. 


A redundant vacuum breaker system has been 
provided between the drywell and wetwell. The 
purpose of the wetwell-to-drywell vacuum relief 
system is to prevent backflooding of the suppression 
pool water into the lower drywell and to protect the 
integrity of the diaphragm floor slab between the 
drywell and wetwell, and the drywell structure and 
liner. 


In the event of a pipe break within the drywell, 
the increased pressure inside the drywell forces a 
mixture of air, steam and water through the drywell 
connecting vents (DCVs), and horizontal vents into 
the suppression pool, where the steam is rapidly 
condensed. The noncondensable gases transported 
with the steam escape to and are contained in the 
free air volume of the wetwell. There is sufficient 
water volume in the suppression pool to provide 
submergence of the upper row of horizontal vents 
when water is removed from the pool during post- 
LOCA drawdown by the ECCS. This drawdown 
floods the RPV to the steamlines, floods the lower 
drywell to its drain to the DCV, and provides for 
water in transit from the break on its gravity drain 
back to the suppression pool. The design pressure of 
the containment is 45 psig (3.16 kg/cm’g). 


During isolation transients, when the MSIVs 
close, the SRVs discharge steam from the relief 
valves through their exhaust piping and quenchers 
into the suppression pool. 


The suppression pool is sized to accommodate 
the stored energy within the RPV during a LOCA 
without exceeding its design temperature. During 
isolation transients there are many hours of decay 
heat absorption storage capability. 


For beyond design basis events, piping with 
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temperature actuated valves connect the DCV with 
the lower drywell. This provides a passive flooding 
capability. 


Reinforced Concrete 
Containment Vessel 
Description 


For the ABWR plant, a circular cylindrical rein- 
forced concrete containment vessel (RCCV) with a 
top slab and a monolithically connected diaphragm 
slab has been selected. The RCCV is integrated with 
the Reactor Building and forms a major structural 
part of this building. The flat annular top slab of the 
drywell is integrated with the fuel pool girders and 
the dryer/separator cavity floors which are framed 
into the Reactor Building structural walls and floors. 
The cylindrical design with its simple geometry 
allows easy and fast construction. The pressure-re- 
taining concrete walls of the RCCV are lined with 
leak tight steel plates and form the boundary of the 
primary containment system. 


The RCCV supports the internal drywell struc- 
tures. Major components framed to the RCCV are 
the equipment hatch and personnel locks. It also 
serves as an anchor point for the Main Steam and 
Feedwater lines. 


The structural framing scheme mentioned ear- 
lier takes advantage of both the RCCV and Reactor 
Building to carry dynamic and shear loads and, 
hence, reduce overall size and thickness of the sup- 
porting walls. The Reactor Building has been sepa- 
rated into four quadrants to provide separation for 
the three-division configuration of the safety systems 
plus one quadrant for non safety systems. 


The RPV is supported by the reactor pedestal 
and is concentric within the RCCV (see Figure 
8-8). The pedestal has multiple functions. It also 
supports the drywell diaphragm floor, the lower 
drywell access tunnels, the horizontal vent system 
and communicating vents between the lower and 
upper drywells. The composite steel-concrete design 
allows fabrication in the shop applying modular con- 
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Figure 8--8. ABWR Reactor Pedestal 


struction techniques, and erecting it in one piece. 


Fire Protection 


The basic layout of the plant and the choice of 
systems to mitigate the effects of fire enhance the 
resistance of the ABWR plant to fire. The safety-re- 
lated systems are designed such that there are three 
independent divisions, any one of which is capable 
of providing safe shutdown of the reactor. In addi- 
tion, there are non-safety-related systems such as the 
Condensate and Feedwater Systems which can be 
used to achieve safe shutdown. The plant arrange- 
ment is such that points of possible common cause 
failure between non-safety-related systems and 
safety-related systems have been eliminated. 


Plant Arrangement 

The plant is laid out with the Control Building 
between the Reactor and Turbine Buildings so that 
power and control signals from the Reactor and 
Turbine Buildings enter the Control Building on 
opposite sides of the Control Building. This arrange- 
ment ensures that a potentially damaging fire in the 
Turbine Building will not disable non-safety-related 
systems capable of providing safe shutdown in both 


Building to the Reactor Building for the safety-re- 
lated loads. These non-safety-related power sources 
are backed up by the safety-related diesel genera- 
tors, which are not affected by events in the Turbine 
Building. 


Divisional Separation 

There are three complete divisions of cooling 
systems, any one of which is capable of safe or emer- 
gency shutdown of the plant. In general, systems are 
grouped by safety division so that in case of fire 
only one division is affected. Complete burnout of 
any fire area does not prevent safe shutdown of the 
plant, since there will always be two other divisions 
available. Each division is served by its own HVAC 
equipment from within that division. 


The remote shutdown panel provides redundant 
control of the safe shutdown function from outside 
the control room in case the control room becomes 
uninhabitable. 


Fire Containment 

Fire containment is achieved through the use 
of concrete fire barrier floors, ceilings and walls 
designed to contain a fire for a duration of three hours 
without structural failure. Fire dampers are required 
for any HVAC duct penetrating a fire barrier, and 
they also have a rating of three hours. Electrical and 
piping penetrations through a fire barrier have seals 
with a three-hour rating. 


There are two firewater pumps in the plant, one 
motor driven and one diesel driven. Each of these 
meets requirements for flow and pressure demand at 
the most hydraulically remote hose connection in the 
plant. Sprinkler systems in the Reactor Building and 
sprinkler and wet standpipe systems in the Control 
Building are designed to remain functional following 
a Safe Shutdown Earthquake (SSE). 


Flood Protection 


The ABWR design incorporates measures for 


flooding protection of safety-related structures, sys- 
tems, and components from both external flooding 
and flooding from plant component failures. 


Flood Protection from External Sources 

Seismic Category I structures remain protected 
for safe shutdown of the reactor during all external 
flood conditions. The safety-related systems and 
components are flood-protected either because 
they are located above the design flood level or are 
enclosed in reinforced concrete Seismic Category I 
structures. These structures have features for flood 
protection, including minimum thickness for walls 
below flood level, water stops in construction joints, 
waterproof coating on external surfaces, roof design 
to prevent pooling of large quantities of water, and 
no penetration of tunnels below grade through ex- 
terior walls. 


Flood Protection from Internal Component 
Failures 

All piping, vessels, and heat exchangers with 
flooding potential in the Reactor Building are seis- 
mically qualified. 

Water spray, foaming, and flooding effects in a 
room with a pipe crack or break are conservatively 
assumed in the safety analysis to take any safe- 
shutdown equipment in the room out of service. 
The following provisions have been made to limit 
the flooding effects to one safety division: 


e Watertight doors and sealed penetrations to 
prevent water seepage or flow. 


e Fire doors designed to hold back water pres- 
sure which also prevent spray from crossing 
divisional boundaries. 


e — Floors, floor penetrations and equipment hatches 
designed to prevent water seepage to lower el- 
evations through the use of seals and curbs and 
routing of drain lines. 


e Water sensitive safety-related equipment raised 
on pads above the floor elevation for protection 


Chapter 8 — Plant Layout and Arrangement 


against expected seepage under non-watertight 
doors. 


Other Buildings 


Turbine Building 

The Turbine Building houses all the components 
of the power conversion system. This includes 
the turbine-generator, main condenser, air ejector, 
steam packing exhauster, offgas condenser, main 
steam system, turbine bypass system, condensate 
demineralizers, and the condensate and feedwater 
pumping and heating equipment. The small size of 
the ABWR Turbine Building makes a significant 
contribution to capital cost savings and a shorter 
construction schedule. 


Control Building 

The Control Building includes the control room, 
the computer facility, the cable tunnels, some of 
the plant essential switchgear, some of the essential 
power, the Reactor Building water system, and the 
essential HVAC system. 


Radwaste Building 

The Radwaste Building houses all equipment 
associated with the collection and processing of the 
liquid and solid radioactive waste generated by the 
plant. The Offgas System components are located 
in the Turbine Building. For system descriptions, 


see Chapter 5. 


Service Building 

In the Service Building are the following facili- 
ties: Administration; Access Control and Security to 
the Reactor building; Health Physics Laboratory; 
and Change Rooms. 


The principal function besides housing the ad- 
ministrative operations of the plant is to control traf- 
fic into and out of the Reactor Building complex. 
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Chapter 
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It is difficult to completely standardize the plant 
design beyond the nuclear island. In addition to 
utility preferences in the steam and power conver- 
sion system, there are also site-unique issues, such 
as the ultimate heat sink location and temperature 
which can play a significant role in the selected con- 
figuration. What follows, therefore, is an example 
configuration, showing one possible implementa- 
tion. Changes in this part of the plant will not have 
any significant impact on the Nuclear Island design 
or operation. 


Steam and Power 
Conversion System 


The Turbine Building houses all equipment 
associated with the main turbine generator and 
other auxiliary equipment. The turbine employs 
a conventional regenerative cycle with condenser 
deaeration and condensate demineralization. The 
turbine-generator is equipped with an electrohydrau- 
lic control system and supervisory instruments to 
monitor performance. The gross electrical output of 
the turbine-generator is approximately 1350 MWe. 


The components of the Steam and Power Con- 
version (S&PC) System are designed to produce 
electrical power utilizing the steam generated by 
the reactor, condense the steam into water, and 
return the water to the reactor as heated feedwater, 
with a major portion of its gaseous, dissolved, and 
particulate impurities removed in order to satisfy the 
reactor water quality requirements. 


The S&PC System includes the turbine portion 


of the main steam system, the main turbine genera- 
tor system, main condenser, condenser evacuation 
system, turbine gland seal system, turbine bypass 
system, extraction steam system, condensate cleanup 
system, and the condensate and feedwater pumping 
and heating system. The heat rejected to the main 
condenser is removed by a circulating water system 
and discharged to the power cycle heat sink. 


Steam, generated in the reactor, is supplied to the 
high-pressure turbine and the steam reheaters. Steam 
leaving the high-pressure turbine passes through a 
combined moisture separator/reheater prior to enter- 
ing the low-pressure turbines. The moisture separa- 
tor drains, steam reheater drains, and the drains from 
the two high-pressure feedwater heaters are pumped 
back to the reactor feedwater pump suction by the 
heater drain pumps. The low-pressure feedwater 
heater drains are cascaded to the condenser. 


Steam exhausted from the low-pressure turbines 
is condensed and deaerated in the condenser. The 
condensate pumps take suction from the condenser 
hotwell and deliver the condensate through the 
filters and demineralizers, gland steam condenser, 
SJAE condensers, offgas recombiner condensers to 
the condensate boost pumps. The condensate boost 
pumps deliver the feedwater through the low-pres- 
sure feedwater heaters to the reactor feed pumps. 
The reactor feed pumps discharge through the high 
pressure feedwater heaters to the reactor. 


The S&PC System main conceptual features are 
illustrated on Figure 9-1, assuming a triple pressure 
condenser. This type of condenser and other site 
dependent ABWR plant features and parameters 
are reported herein based on typical central U.S. 
site conditions. 
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Condenser System 


Normally, the turbine power heat cycle uti- 
lizes all the steam being generated by the reactor; 
however, an automatic pressure-controlled turbine 
bypass system designed for 33% of the rated steam 
flow is provided to discharge excess steam directly 
to the condenser. Although the ABWR Standard 
Plant design is for 33% bypass, this capability could 
be increased to a full load reject capability without 
affecting the Nuclear Island (as has been done for 
Lungmen). 


Turbine Main Steam Systems 

The Turbine Main Steam System delivers 
steam from the reactor to the turbine generator, the 
reheaters, the turbine bypass system, and the steam 
jet air ejectors (SJAEs) from warm-up to full-load 
operation. The Main Steam System also supplies the 
steam seal system and the auxiliary steam system 
when other sources are not available. 


Main Turbine/Generator 
The main turbine is an 1800 rpm, tandem com- 
pound six flow, reheat steam turbine. The turbine 


Figure 9-1. Reference Steam and Power Conversion System 


generator is equipped with an electrohydraulic 
control system and supervisory instruments to moni- 
tor performance. The gross electrical output of the 
turbine generator is approximately 1350 MWe. For 
utilities generating 50 Hz power, the turbine shaft 
speed is 1500 rpm. 


Main Condenser 

The Main Condenser is a multi-pressure three- 
shell type deaerating type condenser. During plant 
operation, steam expanding through the low pressure 
turbines is directed downward into the Main Con- 
denser and is condensed. The Main Condenser also 
serves as a heat sink for the turbine bypass system, 
emergency and high level feedwater heater and drain 
tank dumps, and various other startup drains and 
relief valve discharges. 


Main Condenser Evacuation System 

The Main Condenser Evacuation System 
(MCES) removes the noncondensable gases from 
the power cycle. The MCES removes the hydrogen 
and oxygen produced by radiolysis of water in the 


reactor, and other power cycle noncondensable 
gases, and exhausts them to the Offgas System 
during plant power operation, and to the Turbine 
Building compartment exhaust system at the begin- 
ning of each startup. 


The MCES consists of two 100% capacity, 
double stage, SJAE units (complete with intercon- 
denser) for power plant operation where one SJAE 
unit is normally in operation and the other is on 
standby, as well as a mechanical vacuum pump for 
use during startup. The last stage of the SJAE is a 
noncondensing stage. 


During the initial phase of startup, when the de- 
sired rate of air and gas removal exceeds the capac- 
ity of the SJAEs, and nuclear steam pressure is not 
adequate to operate the SJAE units, the mechanical 
vacuum pump establishes a vacuum in the Main 
Condenser and other parts of the power cycle. The 
discharge from the vacuum pump is then routed to 
the Turbine Building compartment exhaust system, 
since there is then little or no effluent radioactivity 
present. Radiation detectors in the Turbine Building 
compartment exhaust system and plant vent alarm in 
the Main Control Room (MCR) if abnormal radio- 
activity is detected. Radiation monitors are provided 
on the main steamlines which trip the vacuum pump 
if abnormal radioactivity is detected in the steam 
being supplied to the condenser. 


The SJAEs are placed in service to remove the 
gases from the Main Condenser after a pressure of 
about 0.034 to 0.051 MPa absolute is established 
in the Main Condenser by the mechanical vacuum 
pump and when sufficient nuclear steam pressure 
is available. 


During normal power operations, the SJAEs 
are normally driven by cross-around steam, with 
the main steam supply on automatic standby. The 
main steam supply, however, is normally used during 
startup and low load operation, and auxiliary steam 
is available for normal use of the SJAEs during early 
startup, should the mechanical vacuum pump prove 
to be unavailable. 


Turbine Gland Steam System 
The Turbine Gland Steam System provides 
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steam to the turbine glands and the turbine valve 
stems. The Turbine Gland Steam System prevents 
leakage of air into or radioactive steam out of the 
turbine shaft and turbine valves. The gland steam 
condenser collects air and steam mixture, condenses 
the steam, and discharges the air leakage to the 
atmosphere via the main vent by a motor-driven 
blower. 


Turbine Bypass System 


The Turbine Bypass System (TBS) provides the 
capability to discharge main steam from the reac- 
tor directly to the condenser to minimize step load 
reduction transient effects on the Reactor Coolant 
System. The TBS is also used to discharge main 
steam during reactor hot standby and cooldown 
operations. 


The TBS consists of a three-valve chest that is 
connected to the main steamlines upstream of the 
turbine stop valves, and of three dump lines that 
separately connect each bypass valve outlet to one 
condenser shell. The system is designed to bypass 
at least 33% of the rated main steam flow directly 
to the condenser. The TBS, in combination with 
the reactor systems, provides the capability to shed 
40% of the T-G rated load without reactor trip and 
without the operation of SRVs. A load rejection in 
excess of 40% is expected to result in reactor trip 
but without operation of any steam safety valve. 
Optionally, some utilities desire 100% bypass (full 
load rejection) capability. In this case there are more 
bypass valves required. 


The turbine bypass valves are opened by redun- 
dant signals received from the Steam Bypass and 
Pressure Control System whenever the actual steam 
pressure exceeds the preset steam pressure by a 
small margin. This occurs when the amount of steam 
generated by the reactor cannot be entirely used by 
the turbine. This bypass demand signal causes fluid 
pressure to be applied to the operating cylinder, 
which opens the first of the individual valves. As the 
bypass demand increases, additional bypass valves 
are opened, dumping the steam to the condenser. The 
bypass valves are equipped with fast acting servo 
valves to allow rapid opening of bypass valves upon 
turbine trip or generator load rejection. 
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The bypass valves automatically trip closed 
whenever the vacuum in the main condenser falls be- 
low a preset value. The bypass valves are also closed 
on loss of electrical power or hydraulic system pres- 
sure. The bypass valve hydraulic accumulators have 
the capability to stroke the valves at least three times 
should the hydraulic power unit fail. 


When the reactor is operating in the automatic 
load-following mode, a 10% load reduction can be 
accommodated without opening the bypass valves, 
and a 25% load reduction can be accommodated 
with momentary opening of the bypass valves. These 
load changes are accomplished by change in reactor 
recirculating flow without any control rod motion. 


When the plant is at zero power, hot standby or 
initial cooldown, the system is operated manually 
by the control room operator or by the plant automa- 
tion system. The measured reactor pressure is then 
compared against, and regulated to, the pressure set 
by the operator or automation system. 


Steam Extraction System 

Extraction steam from the high pressure turbine 
supplies the last stage of feedwater heating and 
extraction steam from the low pressure turbines 
supplies the first four stages. An additional low 
pressure extraction drained directly to the condenser 
protects the last-stage buckets from erosion induced 
by water droplets. 


Condensate and Feedwater System 

The Condensate and Feedwater System (CFS) 
provides a dependable supply of high-quality feed- 
water to the reactor at the required flow, pressure, and 
temperature. The condensate pumps take the deaer- 
ated condensate from the main condenser hotwell 
and deliver it through the SJAE condenser, the gland 
steam condenser, the offgas condenser, the conden- 
sate demineralizer to the inlet of the condensate 
boost pumps. The condensate boost pumps deliver 
the feedwater through three parallel strings of four 
low pressure feedwater heaters to the reactor main 
feedwater pumps (FWP) section. The FWPs each 
discharge through two stages of high pressure heat- 
ers (two parallel strings) to the reactor. Each reactor 


FWP is driven by an adjustable speed synchronous 
motor. The drains from the high pressure heaters are 
pumped into the suction of the FWPs. 


For a description of the feedwater system on the 
Nuclear Island side, see Chapter 3. 


Moisture Separator Reheater System 

Four horizontal cylindrical-shell, combined 
moisture separator/reheaters are installed in the 
steam path between the high and low pressure tur- 
bines. The moisture separator/reheaters serve to dry 
and reheat the high pressure turbine steam exhaust 
before it enters the low pressure turbines. This im- 
proves cycle efficiency and reduces moisture-related 
erosion and corrosion in the low pressure turbines. 
Moisture is removed in chevron-type moisture sepa- 
rators, and is drained to the moisture separator drain 
tank and from there to the heater drain tank. The dry 
steam passes upward across the heater which is sup- 
plied with main steam. Finally, the reheated steam is 
routed to the combined intermediate valves which 
are located upstream of the low pressure turbines’ 
inlet nozzles. 


Circulating Water System 

The Circulating Water System (CWS), which 
operates continuously during power generation, 
including startup and shutdown, provides cooling 
water for removal of the power cycle waste heat 
from the main condensers and transfers this heat 
to the power cycle heat sink. The CWS consists of 
the following components: (1) screen house and 
intake screens, pumps; (2) condenser water boxes 
and piping and valves; (3) tube side of the main 
condenser; (4) water box fill and drain subsystem; 
and (5) related support facilities such as for system 
water treatment, inventory blowdown and general 
maintenance. 


To circulate the cooling water, there are at least 
three fixed speed motor-driven pumps that are ar- 
ranged in parallel and discharge into a common 
header. This arrangement permits isolation and 
maintenance of any one pump while the others 
remain in operation. 


Other Turbine Auxiliary 
Systems 


Turbine Building Service Water System 

The Turbine Building Service Water (TSW) 
System provides cooling water from the power 
cycle heat sink to the cold water side of the TCW 
heat exchangers. The TSW System consists of 
pumps, motor-operated valves, strainers, piping and 
instrumentation. 


Turbine Building Cooling Water System 

The Turbine Building Cooling Water (TCW) 
System is a closed-loop cooling water system that 
supplies cooling water through the TCW heat ex- 
changers to Turbine Island equipment coolers and 
rejects heat to the TSW System. 


Station Electrical Power 


AC Power Distribution 

The AC electrical power distribution consists 
of three independent load groups (Figure 9-2). Each 
group receives preferred power from its own unit 
auxiliary transformer (UAT) which, in turn, derives 
its power from the main generator during plant 
operation. The main generator has its own circuit 
breaker which allows power to be back-fed through 
the main transformer to supply the auxiliaries when 
the plant is off-line. This also facilitates the startup of 
the plant without the need for startup transformers. 


Each load group supplies power to plant power 
generation (PG) loads, plant investment protection 
(PIP) loads, and safety-related (Class 1E) loads 
through separate buses and associated distribution 
systems. Alternate preferred power can be sup- 
plied through two reserve auxiliary transformers 
(RATs). 


Three dedicated Class 1E emergency diesel 
generators (DGs) supply automatic backup power 
to each of the three safety-related divisions. Each 
DG is capable of providing the required power to 
safely shut down the reactor after loss of preferred 
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power and/or a loss-of-coolant accident (LOCA), 
to maintain the safe shutdown condition, and to 
operate the Class 1E auxiliaries necessary for plant 
safety after shutdown. The diesel generators are now 
located in the Reactor Building. 


In a similar manner, anon-Class 1E combustion 
turbine generator (CTG) supplies automatic backup 
power to selected PIP loads. In the event of station 
blackout (i.e., loss of all AC power including DGs), 
the CTG can be manually connected to any of the 
Class 1E buses. 


Each of the three UATs has dual secondary 
windings. One winding provides 13.8 kV to the PG 
buses and the other winding provides 4.16 kV to 
the PIP and Class 1E buses. Each 4.16 kV Class 1E 
bus feeds its associated Class 1E 480 V unit substa- 
tions through 4.16 kV/480 V/277 V power center 
transformers. Power for the non-Class 1E 480 V 
auxiliaries is supplied from power centers consist- 
ing of either 13.8 kV/480 V/277 V or 4.16 kV/480 
V/277 V transformers and associated metal-clad 
switchgear. To the extent practical, power center 
transformers are uniformly sized (i.e., the same kVA 
rating) to improve voltage regulation, reduce costs, 
and achieve standardization. 


One of the two RATs, which provide alternate 
preferred power to the electrical distribution system, 
has a 13.8 kV secondary winding which feeds the six 
PG buses. The other RAT has two 4.16 kV second- 
ary windings with one winding providing power to 
the three PIP buses, and the other providing power 
directly to a stub bus which, in turn, provides power 
through individual circuit breakers to the three Class 
1E buses. 


The Division I DG provides its output at 4.16 
kV to the Class 1E Division I bus. Likewise, the 
Division II DG provides its output at 4.16 kV to the 
Class 1E Division II bus, and the Division III DG 
provides its output at 4.16 kV to the Class 1E Divi- 
sion III bus. The Class 1 E divisions are independent 
and separated, and there are no automatic inter-con- 
nections between them. 


The CTG provides its output at 13.8 kV to the 
CTG bus which: 
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Figure 9-2. Electrical Power Distribution System 
e Provides power to a 4.16 kV CTG bus through ABWR is such that any plant loads can be manu- 
a transformer. The 4.16 kV CTG bus then pro- ally connected to receive power from any of the six 
vides power directly to the three PIP and three sources (i.e., the two switching stations, the CTG, 
Class 1E buses, as needed. and the three DGs). 


e Provides power to the 480 V CTG auxiliary bus 


through a transformer. DC Power Distribution 


The DC Power Supply (DCPS) consists of three 


e «Contains a bus tie (through a circuit breaker) separate subsystems: 


to the 13.8 kV RAT output bus in order to permit 
the CTG to start and run a condensate pump, 


cooling tower fans, or other selected PG loads, mam yar inte a a 


if needed separated Class 1E divisions) 
e Non-safety-related 125 VDC (three individual 
Should a loss of preferred power occur, each load groups) 
Class 1E bus automatically transfers to its own DG, e Non-safety-related 250 VDC (two individual 
and selected PIP loads automatically transfer to the load groups) 


CTG. However, the interconnection capability of the 


Each DC subsystem consists of a battery and 
associated charger for each division or load group, 
power distribution panels, and all the associated 
control, monitoring and protective equipment and 
interconnecting cabling. In addition, the DCPS 
employs standby chargers that are shared between 
the batteries to enable the individual battery testing 
and off-line equalization. 


The DCPS operates with its battery and battery 
chargers (except standby chargers) continuously 
connected to the DC system. During normal opera- 
tion, the DC loads are powered from the chargers 
with the batteries receiving a continuous charging 
current (i.e., floating) on the system. The chargers are 
powered from the 480 VAC supply of the same divi- 
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sion or load group, with exception of the Division 
IV charger, which is powered from the Division II 
480 VAC supply. In case of loss of AC power to the 
charger or its failure, the DC loads are automatically 
assumed by the battery of each respective division 
or load group. 


The DCPS also facilitates uninterruptable regu- 
lated AC power through inverters in the Vital AC 
(VAC) Power Supply. The VAC supplies constant 
uninterrupted AC power to those loads which require 
continuity of AC power during a loss of preferred 
power event. Each Class 1E division and non-Class 
1E load group has its own individual uninterruptable 
power supply (UPS) unit. 
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Chapter 


Safety Evaluations 


Licensing Framework 


The ABWR licensing basis generally follows 
the USNRC regulations and regulatory guides. This 
framework is the model which has been adopted in 
a number of countries, including Japan and Taiwan 
(which have also approved ABWR). In particular, 
Regulatory Guide 1.70, Rev 3, is used as the basis 
for documenting the safety analyses and the Stan- 
dard Review Plan (SRP) is used by the USNRC in 
reviewing the design. 


The events to be analyzed within the design ba- 
sis are only loosely coupled to a probabilistic basis, 
and can be considered to be deterministic, both in 
the event description and in the acceptance criteria. 
Key points of this policy are: 


e The assumption that Anticipated Operational 
Occurrences (transients) are caused by a single 
equipment failure or single operator error 


e Use of the single active failure (N-1) criterion 
for postulated accidents 


e Certain prescribed hardware and analyses to 
mitigate special events, such as Anticipated 
Transients Without Scram (ATWS) 


There are no specific US regulations govern- 
ing severe accidents, but a special set of review 
guidelines for severe accidents was promulgated 
by the USNRC in the form of several documents 
(SECY 90-016, SECY 93-087). These formed the 
basis for the safety review of the severe accident 
features provided in ABWR. The ABWR is the first 
plant to have undergone a specific review for severe 
accident mitigation and received approval from the 
USNRC. 


Safety Design 
Approach 


The ABWR safety design approach was to 
provide safety features which meet the regulations, 
but also to use PRA techniques to guide the feature 
selection. Insights gained from the PRAs were 
also used to improve plant technical specifications, 
emergency procedure guidelines, the control room 
interface, and the integrated reliability assurance 
program. These insights will be used throughout the 
lifetime of the plant to ensure that plant operations 
maintain a high level of safety. 


The ABWR safety design approach looked 
at four key areas for safety improvement: 


e Operational transients 
e Design basis accidents 
e Special regulatory mandated events 


e Beyond design basis accidents, including core 
melt, commonly called severe accidents 


Since improved operations lead directly to 
improved safety through reduced challenges to 
safety systems, the ABWR introduced a number of 
improvements in this area: 


¢ Increased redundancy and diagnostics for I&C 
control and protection systems so that single 
failures do not lead to scrams 


e  Theuse of 99% trip avoidance statistical design 
for separating nominal and analytical instrument 
set points 


e Increased redundancy in key hardware, such as 
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recirculation and feedwater pumps 


PRA techniques were used to guide the ECCS 
architecture. For example, significant improvement 
in core damage frequency (CDF) was obtained in 
going from 2 divisions to 3 divisions. However stud- 
ies showed little value in going to 4 divisions, due to 
common mode failure considerations. Therefore, for 
design basis accident mitigation the ECCS architec- 
ture chose a 3-division approach with a high pressure 
and a low pressure flooder in each division and heat 
removal in each division. Each division also contains 
all supporting services, such as emergency diesel 
generators. Although it is conceptually possible to 
meet a deterministic N-2 failure criterion with 3 
divisions, PRA studies indicated station blackout 
to be the dominant safety threat. Therefore, in one 
division the high pressure flooder was made steam 
driven. In practice, the ABWR is nearly N-2, with 
only one out of hundreds of possible N-2 combina- 
tions not able to provide core safety. 


Containment design for the ABWR uses a 
double barrier approach, with a low leakage inerted 
pressure suppression primary containment pressure 
boundary surrounded by a slightly negative pressure 
processed atmosphere secondary containment. The 
US NRC granted regulatory credit for holdup of 
containment leakage past the MSIVs in the steam- 
lines and main condenser in offsite dose evaluations. 
This change to past design practice was made to gain 
consistency in approach between ABWR and current 
practices of US operating BWRs. 


For external threats, such as seismic events, the 
ABWR is designed to a site envelope (see Appendix 
A) conservative enough to cover at least 90% of the 
potential sites in the USA. In this way, a utility can 
compare its specific site to the envelope, and if the 
site is within the analyzed conditions, no further 
safety analysis will be required. 


For the key new features, particular attention 
was paid to insure that their introduction did not lead 
to new safety issues. For the recirculation system 
design, redundant power supplies are used and M- 
G sets with flywheels are included to insure a slow 
flow coastdown in case of loss of power. The all 
recirculation pumps trip event is reclassified as an 
infrequent operational occurrence, with time-tem- 


perature acceptance criteria instead of MCPR. The 
justification for this change is the low probability of 
simultaneous loss of power at all 10 RIPs. The pump 
attachments to the reactor vessel were designed so as 
to make impossible a pump shaft blowout in case of 
a pressure boundary failure in a pump housing. 


For the FMCRD, the drives are supported from 
the core plate to avoid a drive ejection on pressure 
boundary failure. In addition, an electromechanical 
brake which is engaged at all times except during rod 
movement was added to avoid rod runout on pres- 
sure boundary failure. Safety grade limit switches 
are included in the design to detect rod separation 
from the drive - this eliminates the possibility of a 
reactivity event from a rod drop accident. Finally, 
diverse C&I systems to monitor rod movement 
eliminated rod withdrawal error transients. 


For all design basis events the response was 
designed to be fully automatic, with no opera- 
tor action needed to accomplish any of the safety 
functions - reactor trip, core cooling, containment 
isolation, heat removal and radiation protection of 
the public. 


Certain special regulatory mandated events 
were also addressed directly in the design. ATWS 
mitigation is completely automated and includes the 
following features: 


e Trip of 4 out of 10 recirculation pumps on high 
reactor pressure 


e Diverse C&I scram (Alternate Rod Insertion) 
signal for rapid hydraulic-driven rod insertion 


e FMCRD electric run-in following a scram 
signal 


e Recirculation flow runback to reduce power 


e Feedwater pump trip after two minutes, if neces- 
sary, to further reduce power 


e Liquid poison injection via the SLCS after 3 
minutes, if power is still not down 


Station Blackout mitigation includes (in addi- 
tion to the steam driven RCIC) an alternate onsite 
diverse AC power source - a Combustion Turbine 
Generator (CTG) for the standard design. The CTG 
is astandby onsite non-safety power source designed 


to feed permanent non-safety loads during loss of 
offsite power (LOOP) events. Implementation at 
multiple unit sites has taken alternate approaches: 
swing EDG at Lungmen, emergency power sharing 
at Kashiwazaki-Kariwa. 


The CTG can supply power to nuclear safety- 
related equipment if there is complete failure of the 
emergency diesel generators and all offsite power. 
Under this condition, the CTG can provide emer- 
gency backup power through manually-actuated 
Class-1E breakers in the same manner as the offsite 
power sources. This provides a diverse source of 
onsite AC power. 

Since active systems form the basis for safety 
protection for transients, design basis accidents and 
special events (prevention), the ABWR has provided 
primarily passive severe accident mitigation features 
to protect the containment from over-pressurization 
and to limit the consequences to the public even if 
the pressure were to exceed the design pressure. The 
philosophy behind this approach is that the only way 
a severe accident could occur is by complete failure 
of the active systems. 


Design Basis 
Transient and 
Accident Performance 


Transient performance, in the safety sense, 
becomes translated into fuel performance and 
operating margins. The primary BWR measures 
are Minimum Critical Power Ratio (MCPR) and 
maximum linear heat generation rate (MLHGR). 
These design parameters vary, depending on the 
specific fuel design being used (e.g., 8x8, 9x9 or 
10x10); however, the ABWR reactor was designed 
to assure flexibility of use of advancing fuel tech- 
nologies while maintaining the capability of at least 
15% operating margins to fuel limits if desired by the 
utility, as required by the US utility sponsored Utility 
Requirements Document. A wide variety of transient 
analyses have been performed with different fuel 
designs to demonstrate that the above requirement 
can be met, even with longer fuel operating cycles 
up to 2 years in length. 
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With the elimination of large pipes attached to 
the RPV below core elevation, the ABWR has no 
core uncovery even for the most limiting design basis 
loss of cooling accident (DBA LOCA). Thus there is 
no concern over peak fuel clad temperature (PCT) 
after DBAs. The peak pressure in the containment 
after DBA has been shown to have 15% margin rela- 
tive to the design pressure of 0.31 MPa (45 psig). 
Thus the ABWR represents a very robust design for 
the traditional design basis accidents. 


Severe Accident 
Mitigation 

Although demonstration of performance for the 
traditional set of design basis transients and accidents 
is important, in recent years regulatory emphasis has 
shifted toward performance for beyond design basis 
events, classified as “severe accidents”. The ABWR 
capability to prevent severe reactor accidents from 
occurring and the capability to withstand a severe 
accident in the extremely unlikely event that one 
should occur were evaluated with several proba- 
bilistic risk assessments (PRAs) during the design 
process. The final evaluation indicates that events 
resulting in damage to the reactor core are extremely 
unlikely, but that even if such events were to occur, 
passive accident mitigation features would limit the 
offsite dose such that the effect on the public and 
surrounding land would be insignificant. 


ABWR Probabilistic Risk Assessment (PRA) 

Acomparison of the internal events PRA for the 
ABWR to PRAs performed for other reactors clearly 
demonstrates the overall improvement in safety 
(see Figure 10-1). The US NRC risk goal for the 
frequency of core damage events in new reactors is 
one in 100 thousand years. The CDF for the ABWR 
was found to be less than 2 per ten million years. This 
represents more than a factor of 10 improvement as 
compared to the previous BWR designs, and a factor 
100 improvement as compared to most light water 
reactors (see Table 10-1). 


Probabilistic methods were also applied to 
events initiated externally: tornado, flood, fire and 
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Figure 10-1. Comparison of CDF to Other Plants 


earthquake. The important design features to ensure 
plant safety for each of these events were identified 
in a manner similar to that for the internal events 
PRA. 

The frequency of core damage due to a tornado 
was found to be extremely low because all safety 
components are located in the concrete Reactor 
Building, and the three divisions of emergency 
diesel generators reduce the probability of a Station 
Blackout (SBO) due to failure of AC power. 


The Reactor Building is designed to physically 
separate the safety divisions. In addition, drains 
in the upper floors of the Reactor Building were 
included in the design to direct water away from 
electrical equipment towards the lower floor of the 
building, where water can accumulate without dam- 
aging safety equipment. As a result, a flood cannot 
damage more than one safety division. Therefore, 
the core damage frequency associated with flooding 
was found to be a very small fraction of the NRC 
Safety Goal. 


The evaluation of fires was based on the Fire- 
Induced Vulnerability Evaluation methodology 
developed by the Electric Power Research Institute 


Table 10-1. ABWR Internal Events CDF 


Event Frequency/yr % 
Station Blackout 1.1x107 71 
Transients 4.5x10% 29 
LOCA 6.9x10° <1 
ATWS 2.7x10°° <1 
Total 1.6x107 


(EPRI). This conservative methodology provides 
procedures for performing quantitative screening 
analyses of fire risk. No risk significant fires were 
identified for the ABWR design due in part to the 
complete divisional separation of all safety systems 
and the ability to initiate and control safety systems 
from the remote shutdown panel. 


The risk of seismic events was evaluated using 
seismic margins method. The ABWR was designed 
for a Safe Shutdown Earthquake (SSE) of 0.3g for 
an envelope of possible soils. In the margins method, 
the margins implicit in the system designs are evalu- 
ated to determine a somewhat conservative estimate 
of the actual capacity of each system. Then, using 
fault trees and event trees similar to those developed 
for the internal events analysis, the system capacities 
are combined to determine the overall plant capac- 
ity. The ABWR was shown to have a factor of more 
than two margin to the design SSE. This ensures that 
there is very little possibility of a core damage event 
as a result of an earthquake. 


The risk of core damage occurring during refuel- 
ing and maintenance operations was also evaluated 
probabalistically and found to be a small fraction of 
the overall core damage risk. This is primarily due 
to the large body of water overlying the core during 
refueling operations. 


ABWR Features to Mitigate Severe Accidents 
As a result of PRA evaluations and other implied 
requirements in the USNRC severe accident review 
guidelines, several new features were added to the 
ABWR design. Five of the primary features are 
described; the first four of these are passive. 


Inerted Containment 

The ABWR containment is normally inerted 
with nitrogen containing < 3.5% oxygen (see discus- 
sion of the Atmospheric Control System in Chapter 
4). Therefore any potential for hydrogen burning or 
detonation after a severe accident is avoided. 


Lower Drywell Flooder 

The Lower Drywell Flooder floods the lower 
drywell with water from the suppression pool 
during severe accidents where core melting and 
subsequent vessel failure occur. Several pipes run 
from the vertical pedestal vents into the lower 


drywell (see Figure 8-6). Each pipe contains a fus- 
ible plug valve connected by a flange to the end 
of the pipe that extends into the lower drywell. In 
the unlikely event that molten corium flows to the 
lower drywell floor and is not covered with water, 
the lower drywell atmosphere will rapidly heatup. 
The fusible plug valves open when the drywell at- 
mosphere (and subsequently the fusible plug valve) 
temperature reaches 260°C. The fusible plug valve 
is mounted in the vertical position, with the fusible 
metal facing downward, to facilitate the opening of 
the valve when the fusible metal melting tempera- 
ture is reached. When the fusible plug valves open, 
suppression pool water will be supplied through the 
system to the lower drywell to quench the corium, 
cover the corium and remove corium decay heat. 
The result will be a reduced drywell temperature 
and less pressure from non-condensable gas genera- 
tion. There will be less chance of overpressurizing 
the containment and increasing leakage. The Lower 
Drywell Flooder is a passive injection system. No 
operator action is required. 


Corium Shield 

The bottom of the lower drywell contains two 
features to mitigate against continued core-concrete 
reactions after quenching by the passive lower 
drywell flooders. The first of these is the use of non- 
limestone aggregrate concrete (so-called basaltic 
concrete). This minimizes any further production 
of carbon-based noncondensables, such as CO and 
CO2. In addition the drywell sumps are covered 
with refractory oxide bricks to prevent intrusion of 
molten corium into the sumps. 


Containment Overpressure Protection System 

If an accident occurs which increases contain- 
ment pressure to a point where containment integrity 
is threatened, this pressure will be relieved through 
a line connected to the wetwell atmosphere, by re- 
lieving the wetwell atmosphere to the plant stack. 
Providing a relief path from the wetwell airspace 
precludes an uncontrolled containment failure. Di- 
recting the flow to the stack provides a monitored, 
elevated release. The relief line, designed for ~ 1 
MPag, contains two rupture disks, in series, which 
open at a pressure above the design pressure but 
below the Service Level C capability of the contain- 
ment (see Figure 4-7). If overpressure occurs, the 
rupture disks will open; and pressure is relieved in a 
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manner that forces escaping fission products to pass 
through the suppression pool. Relieving pressure 
from the wetwell, as opposed to the drywell, takes 
advantage of the decontamination factor provided 
by the suppression pool. After the containment 
pressure has been reduced and normal containment 
heat removal capability has been regained, the 
operator can close two normally open air-operated 
valves in the relief path to reestablish containment 
integrity. Initiation of the pressure relief system is 
totally passive. No power is required for initiation 
or operation of the pressure relief function for an 
indefinite period. 


AC-Independent Water Addition 

Two fire protection system pumps are provided 
on the ABWR: one pump is powered by AC power, 
the other is driven directly by a diesel engine. A fire 
truck can provide a backup water source. One of 
the fire protection standpipes is cross-connected to 
the RHR injection line to the reactor vessel through 
normally closed, manually operated valves. From 
this line, fire protection water can be directed to 
the reactor vessel after the reactor vessel has been 
depressurized. Fire protection water can also be 
directed to the drywell spray header to reduce upper 
drywell pressure and temperature. Figure 4-5 shows 
the piping arrangement. 


An integrated view of how the passive severe 
accident mitigation features work together is shown 
in Figure 10-2. Analyses of the dominant severe ac- 
cident sequence, which is a low pressure core melt 
following a Station Blackout, shows that the COPS 
pressure will not be reached for more than 24 hours. 
In addition, the conditional containment failure 
probability, defined as the loss of containment as a 
fission product barrier, was calculated to be 0.2%, 
far less than the goal of 10% set by the U.S. Utility 
Requirements Document and USNRC guidelines. 


Summary 


For a nominal U.S. site, the offsite dose as a 
function of probability is given in Figure 10-3. It 
can be seen that large releases do not occur even at 
the one in a billion probability level. 
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Figure 10-3. ABWR Whole Body Dose at 800 m 
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Figure 10-2 ABWR Passive Severe Accident Mitigation 
Features 


In summary, the detailed PRA of the ABWR 
design demonstrates that both the core damage 
frequency and the offsite risk goals established by 
the US NRC are met with substantial margin. The 
ABWR represents a substantial improvement in 
safety as compared to earlier plant designs. The high 
degree of safety is attributable to the many improved 
features in the design and to the use of PRA in the 
design process. 
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Chapter 


Plant Operations 


Basic BWR Operation 


Control of the BWR during normal operation 
is simple, largely because the direct cycle creates a 
strong interrelationship between the three primary 
operating conditions: reactor thermal power, pres- 
sure, and water level. Because they are strongly 
interrelated, these conditions can be automatically 
controlled. Thermal power, and hence steam flow 
rate, is changed in a BWR by changing either the 
re-circulation flow rate or control rod position. Steam 
dome pressure in the reactor pressure vessel (RPV) 
is automatically maintained at a constant value by 
controlling the opening of the main turbine control 
valves or, if the pressure increases significantly, by 
opening the turbine bypass valves to allow some of 
the steam to bypass the turbine and go directly to the 
main condenser. Reactor water level is automatically 
maintained at a constant level by controlling the 
speed of the reactor water feed pumps and, hence, 
the feedwater flow rate. By coordinating the con- 
trol of pressure, water level, and reactor power, the 
ABWR can be operated in a load-following mode 
for automatic load-following operations. Above 65% 
power, automatic load following is achieved by only 
changing re-circulation flow. Below this level, power 
is controlled by using control rods. 


Plant startup and shutdown operations are also 
simple in the ABWR. During plant startup, control 
rods are withdrawn to bring the reactor to critical- 
ity. RPV heatup, pressurization and initial power 
ascension are achieved by continuing to withdraw 
the control rods. Reactor power is increased in this 
way until, in order of events, the main turbine is 
synchronized, the first load is applied to the generator 
and the automatic re-circulation flow control range is 
reached. When this last condition is reached, reactor 


power is increased by increasing the recirculation 
flow rate exclusively. 


During full power operation, the turbine accepts 
the steam generated in the reactor and operates in a 
“turbine-follow- reactor” mode. 


For a plant shutdown, the reverse sequence oc- 
curs. After the control rods are fully inserted, reactor 
cooldown and decay heat removal are accomplished 
by bypassing steam to the main condenser and by 
operation of the Residual Heat Removal (RHR) 
System. 


Operating Map 


The ABWR operating map is a steady-state 
representation of reactor power vs. recirculation 
flow (Figure 11-1). The nearly horizontal lines are 
control rod lines representing prescribed control 
rod patterns. The nearly vertical lines are lines of 
constant recirculation pump speeds. Any operational 
path that changes the power and flow from one 
condition to another condition through control rod 
maneuver and/or re-circulation flow change can be 
traced on this figure. 


Operation in certain areas of the power-flow map 
is prohibited in order to (1) maintain core thermal 
limits, (2) avoid operation above the licensed power 
level, (3) avoid conditions where core instability may 
occur, (4) avoid regions not analyzed, or (5) prevent 
operation where excess moisture in the steam may 
be carried to the main turbine. Although the power- 
flow map indicates possible operating states, normal 
plant operation is along the 100% control rod line 
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Figure 11-1 ABWR Power-Flow Map 


(i.e., Curve B in Figure 11-1). In this figure, normal 
plant startup and shutdown trajectory is indicated. 
Automatic protective interlocks prevent operation 
outside prescribed limits or initiate automatic reactor 
shutdown if required. 


Plant Startup and 
Shutdown 


To ensure consistent and error-free operation, 
plant startup and shutdown operations are automat- 
ed. The startup and shutdown sequences are divided 
into a number of small, automated sequences. For 
example, during startup, establishment of condenser 
vacuum, criticality, heatup, pressurization, turbine 
synchronization, power ascension by control rods, 
and power ascension by re-circulation flow are all 
automated sequences. The operator, however, initi- 
ates automatic sequences after checking that all 
prerequisites of a given sequence are satisfied. In 
cases where a mode change involves safety-related 
equipment (e.g., repositioning of the reactor mode 
switch during a startup or shutdown), the computer 
system will prompt the operator to take a manual 
action. There is no automation associated with the 
initiation or shutdown of safety-related equipment. 
Manual operation of any equipment from the main 
control console is always available on demand. 


The ABWR can reach 100% power from a cold 


shutdown condition in less than 25 hours, and in less 
than 5 hours from a hot condition (all control rods 
fully inserted). Figure 11-2 shows the key steps in 
the plant startup sequence, and Figure 11-3 shows 
the key steps in the plant shutdown sequence. Nor- 
mally, during shutdown, the reactor internal pumps 
(RIPs) continue to run at minimum speed until the 
reactor vessel is flooded in preparation for refueling. 
However, if the water level within the vessel is raised 
above the separator spillover, natural circulation 
alone is sufficient to transfer the core decay heat 
to the downcomer region of the RPV, where it is 
removed by the RHR System. Automatic Response 
to Transients. 


REACTOR WATER LEVEL 


REACTOR PRESSURE 


REACTOR COOLANT TEMPERATURE 


GENERATOR POWER 
TURBINE SPEED 


Heat & Drywell Turbine Power Ascension 

Pressurization Inspection Startup (12.5 hrs) 

(6 hrs) (1.5 hrs) (NMS Calibration, 
Reactor Additional Feed Pumps, 
Critical Heat Balance Calculation) 


(1-2 hrs) 


Figure 11-2 ABWR Startup Sequence 


For certain transient events, such as the trip of 
one reactor feedpump, condensate pump, control 
rod drive (CRD) hydraulic pump, or reactor internal 
pump, the ABWR is designed to remain on-line with 
no change in power. This is facilitated by automating 
the responses to such transients. 


Other transients will require a power reduction. 
This latter class of transients includes the loss of 
feedwater heating, tripping of two or three reactor 
internal pumps, partial generator load rejection, full 
load rejection (for plants electing to have a large tur- 
bine bypass system), tripping of one main condenser 
circulating water pump, or high main condenser 
pressure. Response to this type of transient is also 
automated and involves reducing reactor power 
to within the capability of the remaining operable 
equipment. When the failed equipment is returned 
to service, full power operation can be restored in 
a short time. 
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Figure 11-3 ABWR Shutdown Sequence 


For plants electing to have a full generator load 
rejection without reactor scram capability, a 110% 
turbine bypass system is provided. The automatic 
response to a full load rejection consists of (1) rapid 
opening of the turbine bypass valves when the tur- 
bine control valves trip, (2) reduction of reactor core 
flow and power, and (3) insertion of a preselected 
number of control rods. The reactor power is reduced 
to approximately 60% by these automatic actions. 
The operator can achieve further power reduction 
through additional control rod insertions. If the 
generator can be re-loaded, full power operation can 
be rapidly restored. 


Automatic Load- 
Following Capability 


Grid requirements for frequency control, load 
regulation, and load following can be met by the 
ABWR. The automatic process control systems in 
the ABWR enable the reactor to respond to changes 
in turbine/load demand so that the generated steam 
flow matches that required by the turbine to main- 
tain proper load and frequency operation. In the 
65% to 100% power range, the power change rate 
capability is approximately 1% per second using 
only re-circulation flow changes. Below 65%, the 
power change rate is approximately 2.5% per minute 
using control rod motion. All of these operations are 
significantly faster than required to respond to load 
and frequency changes. 
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ABWR load-following operation is fully auto- 
mated. In this manner, the ABWR operates in the 
“turbine-follow-reactor” mode. 


Automated Response 
to Design Basis Acci- 
dents 


In the event of a design basis accident, operator 
action is not required for an indefinite period. This 
capability is achieved by automatic initiation of (1) 
reactor protection systems for reactor shutdown, 
containment isolation, and emergency core cooling, 
(2) suppression pool cooling and reactor scram on 
high pool temperature (to mitigate an inadvertent 
safety-relief valve opening event) and (3) boron 
injection, feedwater flow runback, and insertion of 
control rods by electric-mechanical means should 
there be an anticipated transient without scram 
(ATWS) event. These features enhance overall plant 
safety and allow operators, if necessary or appropri- 
ate, to take control of the accident response. 


Flexibility in Fuel 
Cycle Length 


One of the advantages of ABWR and BWR 
operation in general is the degree of flexibility in 
designing the fuel management plan. This is due 
primarily to the strong negative void coefficient 
associated with the direct cycle (two-phase) flow in 
the core. At the end ofa planned fuel cycle, when all 
control rods have been fully withdrawn, the ABWR 
can maintain full power operation for an extensive 
length of time by increasing the core flow rate (up 
to 110%) due to the built-in capacity margin of the 
ABWR internal re-circulation pumps. The increased 
core flow will reduce the average core void content 
and thus increase reactivity and maintain balanced 
reactor power. 


At the end of this increased core flow opera- 
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tion, the reactor can still continue its operation at 
a gradually reduced power level, or a “coastdown 
operation”, during which the reactor power will 
gradually decrease at a slow rate. This is again due 
to the negative void feedback mechanism where 
lower power level is automatically regulated (or 
balanced) due to slightly decreasing voids and thus 
slightly increasing core reactivity. BWR coastdown 
operation can maintain a coastdown final power 
level of about 85% rated power. Finally, an opera- 
tion with reduced feedwater temperature can also 
increase core reactivity, thus maintaining a higher 
power level for a longer period of time at the end of 
the cycle. The ABWR incorporates design features 
to gradually reduce feedwater temperature. 


All of these operations can extend the plant fuel 
cycle up to the order of a couple of months, thus 
providing significant flexibility for plant operation 
and outage planning. 


Technical 
Specifications 


Plant operation (and maintenance) is governed 
by a set of technical specifications (Tech Specs). 
The purpose of these Tech Specs is to ensure that 
(1) required systems will be available in the event 
of an accident and (2) the plant will always remain 
within analyzed conditions. Technical specifications 
also govern maintenance, and the ABWR Tech 
Specs, in particular, allow for online maintenance, a 
key element in achieving very short outage lengths. 
By taking full advantage of design features such as 
the three ECCS divisions, four divisions of safety 
instrumentation and control, and low core damage 
frequency, the ABWR Tech Specs provide a suf- 
ficient time to perform maintenance of inoperable 
equipment during plant operation. For example, 
one full ECCS division may be taken out of service 
for inspection and maintenance for fourteen days 
before it must be returned to service. Thirty days are 
allowed for a division of safety instrumentation out 
of service because the remaining three divisions of 
instrumentation still provide a single-failure-proof 
capability. The comparable time for one emergency 
diesel generator is fourteen days. 


Emergency Plant 
Operation 


Symptom-based emergency procedure guide- 
lines for the ABWR enable a very simple approach 
for the operators to deal with accidents, without 
having to identify the cause of the accident. For the 
ABWR, only a few key plant parameters need be 
monitored. These parameters provide simple and 
clear entry conditions into Emergency Operating 
Procedures (EOPs). Only a few parameters will need 
to be controlled in an ABWR during an emergency: 
reactor pressure, reactor power, reactor water level, 
and containment conditions such as pressure and 
temperature. The objective of the EOPs is to provide 
the necessary steps for the operator to bring the reac- 
tor to a safe, cold shutdown condition. The ABWR 
EOP is thus very much simplified. 


There are primarily four simple control strat- 
egies, one each for control of the RPV, primary 
containment, secondary containment, and site ra- 
dioactivity. Each of these strategies provides for the 
proper operations to control specified parameters. In 
extreme degraded conditions, contingencies are also 
specified to bring the plant to a safe condition. 


Summary 


Due to inherently safe BWR design principles 
and improved design features, the ABWR provides 
for substantial operation simplicity and flexibility. 
Simple plant automatic processes, for example, 
control reactor water level, pressure, and power. 
Power changes are easily made by changing reactor 
re-circulation flow rate or control rod position. Auto- 
matic load-following capability provides for system 
frequency control, load regulation, and periodic load 
cycling. Full load rejection capability allows for 
fast power recovery after grid disturbances. Highly 
automated normal plant operation provides simple 
startup, shutdown, and transient response capability. 
For design basis accidents, the ABWR is designed 
to not require operator action for 72 hours through 
automation of selected system automation. Through 
safety system redundancy in the design, the techni- 


cal specifications provide for extended periods for 
maintenance of equipment during operation. Simple 
symptom-based emergency operating strategies and 
procedures enable the operators to place the plant in 
a safe condition should an accident occur. 
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Appendix 
Key Design Characteristics 


This appendix lists key design characteristics for the ABWR, using the standard design licensed in 
the US as a reference. Further details can be obtained from the ABWR Standard Safety Analysis 
Report, Rev. 9. 


Overall Design 


Site Envelope 
Safe shutdown earthquake, g 0.3 envelope 
Wind design, km/h 197 
Maximum tornado, km/h 483 
Max dry bulb/wet bulb ambient temperature, °C 46/27 
Thermal and Hydraulic 
Rated Power, MWt 3926 
Generator Output, MWe 1371 
Steam flow rate, Mkg/h 7.64 
Core coolant flow rate, Mkg/h 52.2 
System operating pressure, MPa 7.17 


Average core power density, kW/1 49.2 


Maximum linear heat generation rate, kW/m 44.0 
Average linear heat generation rate, kW/m 13.6 
Minimum critical power ratio (MCPR) 1.2 - 1.3* 
Core average exit quality, % 14.5 


Feedwater temperature, °C 215.6 


* Depending on the cycle length 
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Fuel Assembly 

Number of fuel assemblies 

Fuel rod array 

Overall length, cm 

Weight of UO2 per assembly, kg 
Number of fuel rods per assembly 
Rod diameter, cm 

Cladding material 

Fuel Channel 

Thickness corner/wall, mm 


Dimensions, cm 
Material 
Reactor Control System 


Method of variation of reactor power 


Number of control rods 
Shape of control rods 


Pitch of control rods, cm 
Type of control rod drive 


Rod step size, mm 
Number of hydraulic accumulators 
Hydraulic scram speed, sec to 60% insert 


Electric drive speed, mm/sec 
Type of temporary reactivity control 


Incore Neutron Instrumentation 
Total number of LPRM detectors 

Number of incore LPRM penetrations 
Number of LPRM detectors per penetration 
Number of SRNM penetrations 


872 
10x 10 
447 
183 
92 
1.026 
Zircaloy-2 


2.5/1.6 
14X 14 
Zircaloy-4 


Moveable control 
rods and variable 
forced coolant 
flow 
205 
Cruciform 
31 


Bottom entry elec- 
tric hydraulic fine 
motion 


18 
103 
1.44 

30 


Burnable poison; 
gadolinia urania 
fuel rods 
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Reactor Vessel and Internals 


Reactor Vessel 
Material 


Design pressure, MPag 

Inside diameter, m 

Inside height, m 

Steam Separators and Dryers 
Separator type 

Number of separators 

Dryer type 

Reactor Recirculation 

Number of recirculation pumps 

Pump motor type 


Design flow rate m?/hr/pump 


Flow Control 


Pump inertia, kg-m? 
Main Steam 
Number of steam lines 


Diameter of steam lines, cm 


Number of safety/relief valves 


Low-alloy steel/ 
stainless and Ni- 
Cr-Fe alloy clad 


8.62 
7.1 
21.0 


AS-2B 
349 


Chevron 


10 
Wet motor 
7700 


solid state variable 


frequency drive 
19.5* 


* Coastdown is determined by 4400 kg-m° M-G set flywheel, not pump 
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Emergency Core Cooling 


Reactor Core Isolation Cooling 


Number of pumps 1 

Type Steam turbine 
YP driven pump 

Flow rate, m?/h 182 


Pressure range, MPa 1.1 - 8.2 
High Pressure Core Flooder 

Number of Pumps 

Flow rate at 8.1 MPa, m?/hr 


Flow rate at 0.7 MPa, m?/hr 
Low Pressure Core Flooder/ Residual 


Heat Removal 
Number of Loops 


Flow rate at 275 kPa, m?/hr 

Automatic Depressurization 
Number of relief valves 

Reactor Building Cooling Water 
Number of loops 

Flow rate per loop (LOCA), m?/hr 

Heat removal duty per loop (LOCA), MWt 
Service Water 

Number of loops 

Hydrogen Recombiner 

Type Thermal reaction 
Number of units 

Flow rate per unit, m?/hr 

Standby Liquid Control 

Number of pumps 

Flow rate per pump, m*/h 
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Primary 


Pressure suppres- 


Type sion 


Reinforced con- 

Construction crete with steel 
liner 

Drywell Concrete cylinder 
Wetwell Concrete cylinder 
Design pressure, MPa 0.31 
Design leak rate, % free volume/day 0.5* 
Drywell free volume, m? 7350 
Wetwell free volume, m° 5960 
Suppression pool water volume, m ° 3580 
Number of vertical vents 10 
Vertical vent diameter, m 1.2 
Number of horizontal vents/vertical vent 3 
Horizontal vent diameter, m 0.7 
Secondary 
Type Controlled leakage 


Reinforced con- 


Construction IA 
Design pressure, Pa 1724 


Design in leakage rate at 6.4 mm water, %/day 50 
* Excluding MSIV leakage 
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Auxiliary Systems 


Reactor Water Cleanup 

Number of pumps 2 
Type Canned rotor 
Flow rate per pump, m°/h/ % of feedwater 154/2 
No. of regenerative heat exchangers 

No. of non-regenerative heat exchangers 

Return water temperature (cleanup mode), °C 

Fuel Pool Cooling and Cleanup 

Number of pumps 

Flow rate per pump, m?/h 

Number of heat exchangers 

Total heat removal capability, MWt 


Suppression Pool Cleanup 
Number of pumps 


Flow rate, m?/hr 

Reactor Building Cooling Water 
Number of loops 

Flow rate per loop (normal), m?/h 
Heat removal duty (normal), MWt 
Flow rate per loop (shutdown), m°*/h 
Heat removal duty (shutdown), MWt 
Drywell Cooling 

Number of fans 

Flow rate per fan, m*/h 

Heat removal duty, MWt 
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Appendix 


Frequently Asked Questions 


What has the ABWR 
done to reduce 

the potential for 
Intergranular Stress 
Corrosion Cracking? 


Boiling Water Reactors (BWR) have been sup- 
plying commercial electric power for about 30 years. 
In that time, the understanding of both the materials 
of construction and the degradation mechanisms has 
increased significantly. This understanding has been 
used to make the ABWR materials robust while 
preserving the experience of the operating BWR 
fleet where possible. The ABWR makes use of 
austenitic stainless steels and nickel base alloys as 
well as low alloy and carbon steel for all the major 
components. The plant design takes into account the 
potential effects of stress corrosion cracking, irradia- 
tion embrittlement, erosion/corrosion and radiation 
buildup in the careful application of these materials. 
This application of materials is made in conjunction 
with good fabrication practice and strict operating 
control of the coolant environment chemistry to 
minimize the potential for long-term degradation and 
radiation buildup. The following is a more detailed 
explanation of each area. 


Austenitic Stainless Steel Materials for ABWR 
Internals and Components 

Austenitic stainless steels, because of high 
general corrosion resistance, high toughness, ease 
of fabrication, and acceptable strength, have been 
commonly used for reactor internals and some piping 
systems. In the ABWR, the primary consideration 
in the use of these materials is the development of 


resistance to intergranular stress corrosion cracking 
(IGSCC) both in low and high fluence locations. 
Based on field and laboratory efforts, this resistance 
is tied to control of the material’s composition, con- 
trol of the fabrication processes and control of the 
coolant environment. 


The extensive understanding has now thorough- 
ly demonstrated that reduction of carbon content in 
austenitic stainless steel reduces susceptibility to 
IGSCC. Three main austenitic materials are being 
used: Type 316NG/316L wrought material, CF3M 
cast materials, and XM-19 high strength stainless 
steel. 


For the majority of the reactor internal struc- 
tures, resistance to sensitization for the ABWR is 
achieved by using a special Type 316NG (Nuclear 
Grade). This alloy has carbon restricted to a maxi- 
mum 0.020% by weight to prevent sensitization, has 
nitrogen additions up to a maximum of 0.12% to 
maintain the desired strength levels and has specific 
fabrication and processing controls to increase the 
resistance to any crack initiation. Alternately, where 
design does not need the mechanical strength of Type 
316, Type 316L is used with the same carbon limit 
and controls on fabrication processes. 


Types 308L/316L weld metal and CF3M aus- 
tenitic stainless steel castings are also used in the 
reactor as well as for many of the complex shape 
components such as valve body castings. These 
alloys have a duplex microstructure which has 
been found to have very high resistance to IGSCC. 
Their resistance is maximized by again limiting 
carbon content to less than 0.03% while requiring a 
minimum ferrite levels (greater than 8%) to assure 
adequate resistance to IGSCC. 

For any highly irradiated stainless steel in-core 
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components such as control blades and instrument 
tubes, it is desirable to provide additional potential 
for the component to reach the intended design life. 
Consequently, for the ABWR both the component 
design and materials of construction have been 
altered to provide this higher resistance against 
IASCC. The ABWR designs are crevice-free and 
incorporate control of trace element chemistry 
such as sulfur and phosphorus which provide this 
resistance. 


The final material selected for specialized 
ABWR applications is XM-19. This is a high 
chromium, high manganese austenitic stainless steel 
alloy that is strengthened with specific nitrogen ad- 
dition (as opposed to carbon). It has an established 
record of excellent performance in very demand- 
ing applications in BWR service where both high 
strength and extremely high resistance to IGSCC 
are required. Example applications in the ABWR 
include components in the FMCRD as well as core 
plate and top guide bolting. 


Nickel Base Alloys for ABWR Application 

Nickel base alloys, particularly Alloy 600 and X- 
750, are also used extensively in BWRs. In addition 
to their excellent corrosion resistance, nickel alloys 
have a thermal expansion coefficient more similar 
to the low alloy steel used in the construction of the 
reactor pressure vessel and nozzles. This feature has 
led to the application of Alloy 600 for several parts 
of the core internals, including the shroud support 
structure as a transition material placed between the 
alloy steel reactor vessel and stainless steel internals. 
The other desirable feature of Alloy 600 is that it is 
resistant to stress corrosion crack initiation in the 
post-weld heat treated condition, thereby allowing 
attachment to low alloy steel prior to stress relief. 
For the ABWR, to add margin against IGSCC these 
alloys and their weld metals have been modified 
with stabilizing additions of niobium to reduce the 
potential for chromium depletion. For the wrought 
structures, the ABWR employs an Alloy 600 (des- 
ignated as 600M) which has a niobium content on 
the order of 1 to 3%. For weld metal, Alloy 82 with 
high stabilizing ratios is used, leading to high IGSCC 
resistance as well. 


Alloy X-750 is also used to a limited extent in 
the ABWR where high strength is required. Alloy X- 


750 is a precipitation hardening high strength nickel 
base alloy which will perform well in the ABWR en- 
vironment under the proper application. To improve 
stress corrosion cracking resistance for the ABWR, 
both the heat treatment and stresses of Alloy X-750 
are controlled based on the extensive operating plant 
experience and material understanding. 


Component Fabrication and Design 
Considerations 

Aside from selection of materials that are in- 
trinsically resistant to IGSCC, the fabrication of 
components will be controlled to ensure that this 
high resistance is maintained in the finished part. 
Low heat input welding processes will be used to 
decrease the likelihood of any sensitization due to the 
welding process. The margin of IGSCC resistance 
will be reduced even for the intrinsically resistant 
materials by abusive fabrication practices such as 
excessive cold working. Post-manufacturing sur- 
face processing such as polishing can be applied 
to the weld heat-affected zones to remove surface 
cold work, residual stresses and strains, thereby 
further increasing the resistance to IGSCC initiation. 
Contamination with in-process materials having 
high levels of species such as chlorine, fluorine and 
sulfur can degrade performance. Consequently, to 
protect the high level of resistance obtained by using 
materials such as described above, for the ABWR, 
the entire fabrication and installation process is 
controlled to prevent detrimental practices. 


A final consideration in control of IGSCC is the 
design itself. Crevices have been eliminated where 
possible and the number of welds has been reduced. 
The top grid structure, for example, is manufac- 
tured from a single solution annealed plate, thereby 
eliminating the risk of IGSCC. The core shroud is 
constructed in a manner to locate all welds away 
from the highest fluence locations. 


Water Chemistry Control 

With respect to materials performance in the 
BWR, a substantial body of data now exists that 
shows that water chemistry is a key factor in mate- 
rials degradation as well as radiation buildup pro- 
cesses, especially for core internal components. It 
has become very clear that the presence of oxidizing 
species in the high purity coolant (such as oxygen 
and hydrogen peroxide), as well as anionic species 


that contribute to the coolant conductivity, can be 
correlated with incidence of IGSCC cracking as well 
as the rate of progression of any initiated cracks. 
Events such as resin intrusions can also reduce the 
resistance to SCC initiation. The benefits of operat- 
ing with good water chemistry are very clear and 
the owners of operating BWRs (even plants that 
have not experienced severe degradation in water 
chemistry such as resin intrusions) have adopted 
practices to obtain low conductivity. Thus, the Elec- 
tric Power Research Institute (EPRI) has developed 
guidelines for water chemistry control that provide 
specific recommended limits on overall conductiv- 
ity as well as specific species. For the ABWR, 
recommended water chemistry is applied such that 
the units operate at or below a target conductivity 
of 0. 1 uS/cm whenever the reactor system is greater 
than 200°F (93°C). 


These guidelines also recommend the applica- 
tion of hydrogen water chemistry (HWC) when 
possible. The main function of HWC is to inject 
sufficient hydrogen into the condensate to reduce 
oxidizing species and maintain the Electrochemical 
Potential (ECP) of the reactor water below -0.23 V 
Standard Hydrogen Electrode (SHE). The addition 
of hydrogen has been documented to effectively 
control Stress Corrosion Cracking (SCC). While 
HWC can result in additional main steam line ra- 
diation, the use of noble metal technology such as 
noble metal chemical addition (NobleChemTM) 
can reduce the hydrogen needed for SCC control 
through catalytic action while limiting any steam 
line radiation issues. 


Can the reactor vessel 
and attached piping 
really last 60 years? 


Alloy Steel Pressure Vessel and Carbon Steel 
Piping 

The reactor vessel is also a very important com- 
ponent where 30 years of BWR operating experience 
and materials understanding has been used in the 
ABWR. The vessel draws from the understanding 
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of materials degradation mechanisms and fabrication 
experience. Of key interest are the effects of neutron 
irradiation over the life of a reactor vessel beltline 
region (the region immediately around the core), 
which results in a progressive loss of fracture tough- 
ness. This shiftin NDT (nil ductility temperature) to 
higher temperatures can influence reactor operation 
with respect to such items as bolt-up temperature 
and hydrostatic test temperature. Consequently, it 
is advisable to start with a low NDT and use mate- 
rial resistant to neutron radiation damage. Copper 
and phosphorus have been identified as detrimental 
elements in alloys steels with respect to neutron 
damage, and nickel is considered to also be a factor. 
The corrosion behavior of reactor vessel steels is also 
well understood. There is significant experience with 
these steels to assure that there is high resistance 
to any SCC processes under the ABWR operating 
coolant environment. 


For the ABWR reactor vessel, high toughness 
and retention of that toughness in service is provided. 
Strict controls are specified on initial fracture tough- 
ness of vessel components. Reactor vessel shell 
courses are required to have RTNDT (reference nil 
ductility transition temperature) of -20°C or less. In 
addition, copper content is controlled to 0.05% maxi- 
mum for base metal and weld metal. Phosphorus 
is limited to 0.006 and 0.008%, respectively. With 
these very low levels of copper, the shift in NDT for 
the ABWR vessels is expected to be very small over 
the operating life of the units. The estimated shift 
in RTNDT is estimated to be less than 11°C over a 
60 year operating life. 


Low alloy steels are also used in many piping 
applications. The reduced corrosion rates make it 
attractive for several systems. However, the ABWR 
also employs carbon steel piping in some systems. 
This selection has been made to aid in plant fabrica- 
tion while taking advantage of the steel’s inherent 
toughness. Although erosion-corrosion in carbon 
steel power plant piping systems has been experi- 
enced in some units, oxygen injection is used for 
the ABWR to minimize this concern. Corrosion 
allowances for 60 years operation are included in 
the piping design. 
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What has ABWR done 
to address worker 
radiation exposure? 


Materials Considerations 

With the increasing focus on managing radiation 
buildup, the ABWR focuses on both alloy selection 
and water chemistry modification and control to 
minimize this effect. Cobalt, as activated Cobalt-60, 
is well known as the major contributor to gamma 
radiation levels in nuclear plants during shutdown. 
This presence of Co-60 significantly affects person- 
nel exposure to gamma radiation during maintenance 
activities. There are many potential sources of cobalt 
in a water-cooled reactor system. Cobalt base alloys 
are commonly used in valves as seats and other com- 
ponents where wear and galling resistance is vital. 
Stainless steel, commonly used for reactor internal 
structures and some piping systems, also contains 
some cobalt as a trace element. Also, carbon steels 
contribute dissolved iron to the reactor water, which 
acts as an accumulator of cobalt and promotes its 
concentration. 


With respect to materials improvements, three 
broad areas are addressed: (1) elimination of cobalt 
base alloys wherever possible; (2) reduction of 
cobalt in stainless steels of high surface area, high 
flow rate components; and (3) reduction of iron 
input to reactor water by use of more corrosion-re- 
sistant ferritic piping materials. Cobalt base alloys 
are almost completely eliminated inside the reactor 
pressure vessel of the ABWR. One reason is that, by 
eliminating jet pumps found in conventional BWRs, 
stellite hard facing used in jet pump slip joints will 
not be present. Another significant improvement 
is the use of iron and nickel base alloys for control 
blade guide rollers and pins rather than cobalt base 
alloys. Outside the pressure vessel, valve seats will 
be considered for cobalt alloy replacement. Stainless 
steel and nickel alloy components in which cobalt 
content will be controlled include feedwater heaters, 
control blades, fuel bundle hardware, steam separa- 
tors and dryer, and some core support components. 
To reduce iron input, extensive use of low alloy 
steel and atmospheric corrosion-resistant steel in 
piping systems and other components will be imple- 
mented. In addition to other measures, the Reactor 


Water Cleanup (RWCU) System includes filtration 
features to minimize the amount of cobalt-contain- 
ing corrosion products retained in the system. The 
other approach to minimizing radiation buildup is 
through water chemistry changes. Small additions of 
depleted zinc oxide (DZO) to the coolant drastically 
change the oxide films, thereby minimizing cobalt 
content and reducing surface radiation buildup. 


Minimization of Radiation Exposure 

The ABWR combines advanced facility design 
features and administrative procedures designed to 
keep the occupational radiation exposure to person- 
nel as low as reasonably achievable (ALARA). Dur- 
ing the design phase, layout, shielding, ventilation 
and monitoring instrument designs were integrated 
with traffic, security and access control. Operating 
plant results were continuously integrated during 
the design phase. Clean and controlled access areas 
are separated. 


Reduction in the plant personnel radiation ex- 
posure was achieved by (1) minimizing the necessity 
for and amount of personnel time spent in radiation 
areas and (2) minimizing radiation levels in routinely 
occupied plant areas in the vicinity of plant equip- 
ment expected to require personnel attention. 


Minimizing the time required by plant operators 
in high radiation areas was achieved through design 
features such as described in these examples: 


e Controls and instrumentation are located in 
areas that are accessible during normal and 
abnormal operating conditions. Remote opera- 
tion is incorporated where feasible (e.g., back- 
washing and precoat operations in the reactor 
water cleanup and fuel pool cleanup systems). 


e Equipment is designed to facilitate mainte- 
nance. Equipment such as the RHR heat ex- 
changer is designed with an excess of tubes to 
permit plugging of some tubes. Some valves 
have stem packing of the cartridge type that 
can be easily replaced. Refueling tools are de- 
signed for drainage and with smooth surfaces 
to reduce contamination. Vessel and piping in- 
sulation is easily removable. 


e Materials selection considers ALARA require- 
ments. 


Examples of design considerations to minimize 
equipment radiation levels include: 


e Equipment and piping are designed to reduce 
accumulation of radioactive materials. Piping 
is constructed wherever possible of seamless 
pipe, and filters and demineralizers are back- 
washed and flushed prior to maintenance. 


e Leakage from equipment is piped to sumps 
and floor drains. 


e The materials used in the primary coolant sys- 
tem consist mainly of austenitic stainless steel, 
carbon steel and low alloy steel components. 
The use of cobalt is minimized to reduce the 
potential for gamma radiation. 


e Radioactive isotopes in the primary coolant are 
limited by the use of RWCU and condensate 
demineralizer on the reactor feedwater. 


e External recirculation pumps and recircula- 
tion piping have been replaced with internally 
mounted recirculation pumps. The RIPs can 
be easily removed for maintenance outside the 
lower drywell radiation zone. 


e Clean purge water is continuously supplied to 


the RIPs and FMCRDs to keep the equipment 
from accumulating radioactive contaminants. 


In addition to minimizing radiation levels and 
time spent in radiation areas, other features were 
incorporated to further reduce personnel radiation 
exposure. 


Radiation zones were established in all areas 
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of the plant as a function of both the access require- 
ments and radiation sources in that area. Operating 
activities, inspection requirements of equipment, 
maintenance activities and abnormal operating 
conditions were considered in determining the ap- 
propriate zoning for a given area. 


Extensive consideration was given to implemen- 
tation of radiation shielding. The primary objective 
of radiation shielding is to protect operating person- 
nel and the general public from radiation emanat- 
ing from the reactor, power conversion systems, 
radwaste process systems and auxiliary systems. 
Radiation shielding also is designed to limit the 
radiation exposure of critical components within 
specified limits to assure that their performance and 
design life are not impaired. 


For all areas potentially having airborne radio- 
activity, the ventilation systems were designed such 
that during normal and maintenance operations, air- 
flow is from an area of low potential contamination 
to an area of higher potential contamination. This 
was achieved by keeping specific zones at higher 
or lower pressure, as required, in respect to their 
adjacent compartments. 


Overall, it is expected that the annual worker 
dose for the ABWR will be significantly reduced 
relative to conventional light water reactors due to 
these materials technologies. Based on early feed- 
back form the operating ABWRs in Japan, it is ex- 
pected that the US Utility Requirements Document 
goal of less than 100 manRem/yr (1manSv/yr) will 
be met by a wide margin. 
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